israeli-insurance-comparator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md workflow explicitly instructs the agent to fetch and use live quotes from public third-party websites (e.g., car.cma.gov.il, Hova.co.il, Shukabit, Wobi, Bestie), requiring the agent to read and act on that external content to build comparisons and make recommendations, which creates a clear vector for untrusted third-party instructions to influence behavior.