booking-best-price

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs obtaining a Firecrawl API key and explicitly tells the user to replace YOUR-API-KEY / set FIRECRAWL_API_KEY in command lines (including example commands with the key), which requires embedding the secret verbatim in generated commands or outputs and thus risks exfiltration.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required runtime workflow scrapes the user-pasted OTA listing link (Step 1) and then searches/extracts identifiers from that scraped page content (Steps 1–3), which is outsider-authored free text from third-party booking sites/aggregators.