tripadvisor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider-authored free text is ingested when the workflow calls TripAdvisor’s location/{locationId}/reviews endpoint, whose JSON includes text and title fields containing third-party review content; the LLM would read that response body as prompt context.