zakat-fiqh

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires inspecting public charity websites for claims (see "ZAKAT-ELIGIBLE | Charity explicitly claims zakat on website" in the Wallet Tag System and the "Zakat Evidence Detection" section), so the agent ingests and acts on untrusted third‑party web content which directly influences classification/tagging decisions.