realestate-compare

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow performs multiple WebSearch queries for each provided address (e.g., “zillow redfin listing details”, “recent sales comparable homes neighborhood”, “school ratings walk score crime rate”), which can ingest outsider-authored free text from public web pages into the agent’s LLM context.