israeli-education-system

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to query public third-party sites (e.g., data.gov.il for school lookups, nite.org.il for psychometric info, and university websites for admission rules) as part of its required workflow (see Step 1 and Example 3), meaning the agent ingests untrusted public web content that can materially influence its decisions.