israeli-freelancer-ops

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's required Step 3 and references/utility-portals.md explicitly direct the agent to use browser automation to navigate and download bills from third‑party public portals (e.g., iec.co.il, bezeq.co.il, partner.co.il, municipality portals and misim.gov.il), parse that external content, and use the extracted data to drive reminders and escalation actions, so untrusted third‑party pages can materially influence the agent's decisions and tool use.