israeli-grocery-price-intelligence

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow (Step 1 in SKILL.md and the references/chain-feeds.md) instructs the agent to fetch and parse public XML price feeds from third-party portals (e.g., http://prices.shufersal.co.il, https://url.publishedprices.co.il, http://matrixcatalog.co.il, https://prices.carrefour.co.il) and to interpret those feeds' fields as part of price-matching and recommendation logic, which is untrusted external content that can materially influence actions.