israeli-bank-connector

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs (SKILL.md Step 2 and the "Gotchas"/Troubleshooting notes) to fetch transactions via israeli-bank-mcp / il-bank-mcp which wrap the israeli-bank-scrapers library that scrapes public bank websites, and those fetched transaction/merchant descriptions are directly read and used by the agent and scripts (scripts/categorize_transactions.py) to drive categorization and follow-up analysis—i.e., untrusted third‑party page content is ingested and can materially affect decisions.