people-property

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to call third-party Whitepages endpoints (e.g., https://stableenrich.dev/api/whitepages/person-search and /property-search) to fetch public-records/person & property data which the agent must read and act on, so untrusted third‑party content can materially influence decisions and tool use.