indice-titularidad

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly directs opening and using public third-party websites (e.g., https://informes.dnrpi.jus.gob.ar, https://servicios.rpba.gob.ar and https://www.colescba.org.ar) and requires reading portal-generated values (VEP numbers, timbrado, códigos de seguridad, payment statuses) that directly determine payments, form submissions, and tracking, so external webpage content can materially influence agent decisions.