israeli-mortgage-comparator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow (Step 5 in SKILL.md) explicitly instructs the agent to "request quotes from at least 3-4 banks" and the HE metadata lists "WebFetch" as an allowed tool, indicating the agent will fetch public bank rate pages and other open third‑party websites as part of its comparison—exposing it to untrusted third‑party content that could carry indirect prompt injections.