israeli-grocery-price-intelligence

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md Step 1 and references/chain-feeds.md) instructs the agent to fetch and parse public Price Transparency Law XML feeds from third‑party portals (e.g., https://prices.shufersal.co.il and https://url.publishedprices.co.il) and to use fields like item_name and promotions to drive price comparisons and shopping/optimization decisions, which meets the criteria for ingesting untrusted public content that can materially influence agent actions.