travel-planner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's required workflow (e.g., "Accommodation Strategy" instructs to "Read recent reviews (within 6 months)" and the "Destination Research" and "Local Transit" steps explicitly call for researching visa requirements, safety, transit cards, and local info from public sites), which implies fetching and interpreting untrusted user-generated and public web content that could influence planning decisions.