people-property

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly instructs the agent to fetch and interpret data from third-party Whitepages endpoints (https://stableenrich.dev/api/whitepages/person-search and /property-search), which return public/untrusted personal records that the agent is expected to read and act on as part of its workflows.