google-flights

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly automates a browser to open and scrape Google Flights pages (https://www.google.com/travel/flights), reads snapshot link text and booking-provider pages, and clicks links—i.e., it ingests and acts on live public web content that could carry untrusted instructions.