realestate-screen

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime execution flow includes “Search for matching properties — use 5-8 WebSearches targeting the criteria,” which will fetch public web pages/listings and ingest their readable text (e.g., property descriptions/prices) into the agent’s LLM context, creating an indirect prompt-injection risk from outsider-authored web content.