israeli-telecom-comparator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow (Step 4 and the example actions) instructs the agent to fetch and use open/public third-party sites (e.g., SmartCut, Haboreret, kamazeole and carrier coverage maps/address checkers like bezeq, cellcom, partner) to determine current plans and coverage, which the agent must read and interpret to make recommendations, exposing it to untrusted user-generated and public web content that can materially influence actions.