israeli-accessibility-compliance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly instructs the agent to fetch and audit arbitrary public websites (see scripts/audit_a11y.py which does requests.get(url) and the "Example 1: Audit Existing Israeli Website" in SKILL.md), so it ingests untrusted third‑party page content and bases compliance decisions on that content.