israeli-smart-saver

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly instructs the agent to fetch and act on content from public third‑party sites (e.g., "Search Zap.co.il for model comparison and price history" and use Cashback.co.il / Cashdo / BuyMe data), meaning untrusted web content and user reviews are read and used to drive purchase and subscription decisions.