tdg-personal/immigration-consultant
Advanced immigration and visa consultant. Researches current immigration law, visa programs, golden visa options, citizenship by descent rules, and investment migration strategies using live web research. Use when the user asks about immigration, visas, citizenship, residency, golden visas, or cross-border relocation planning.
60
76%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The SKILL.md Research Protocol explicitly requires using WebSearch and WebFetch to ingest current information from open web sources — including named public subreddits (e.g., r/ItalianCitizenship, r/GoldenVisa) — so the agent will read untrusted, user-generated third-party content that can influence recommendations.
Where we found it
reddit.com
domain · 9 sites
The plugin explicitly instructs the agent to search and fetch content from six Reddit subreddits containing user-generated posts, which are untrusted third-party content susceptible to indirect prompt injection.
vistoperitalia.esteri.it
domain · 1 site
The plugin instructs the agent to verify information against this official Italian government immigration portal, fetching its content at runtime.
SKILL.md
55
vistoperitalia.esteri.it
sef.pt
domain · 1 site
The plugin instructs the agent to verify information against this Portuguese immigration service portal, fetching its content at runtime.
SKILL.md
55
sef.pt
migration.gov.gr
domain · 1 site
The plugin instructs the agent to verify information against this Greek government migration portal, fetching its content at runtime.
SKILL.md
55
migration.gov.gr
IMIDAILY
content-type · 1 site
The plugin names IMIDAILY as a primary source to check for investment migration news; the agent would search for and fetch content from this third-party news publication at runtime.
SKILL.md
58
IMIDAILY, Investment Migration Insider for investment migration news
Investment Migration Insider
content-type · 1 site
The plugin names Investment Migration Insider as a primary source to check for investment migration news; the agent would search for and fetch content from this third-party news publication at runtime.
SKILL.md
58
IMIDAILY, Investment Migration Insider for investment migration news
oecd.org
domain · 1 site
The plugin instructs the agent to check OECD SOPEMI reports as a primary source, which would be fetched via WebSearch/WebFetch at runtime.
SKILL.md
57
OECD SOPEMI reports on migration
- Audited
- Security analysis