car-advisor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow and references/data-sources.md explicitly require realtime web_search and fetching public third‑party pages (e.g., 懂车帝, 汽车之家, 知乎, Bilibili, brand websites) and instruct the agent to read and integrate user-generated reviews and web pages into decision-making and recommendations, which exposes the agent to untrusted third‑party content that could carry indirect prompt injection.