flight-search-strategy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill outlines a flight search strategy using various APIs, search engines, and flight comparison services (Duffel, Google Flights, Skiplagged, Kiwi, Seats.aero), which fetch public flight inventory and pricing data from the web and third-party travel platforms.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The referenced ghcr.io container image is an official-format GitHub Container Registry package reference for a specific third-party repository and lacks strong first-party provenance.