Booking

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's platforms.md and search.md explicitly require using web_fetch/browser to check live availability and to search public sites (e.g., Booking.com, Airbnb, Hostelworld, Facebook Groups and direct hotel/hostel sites), meaning the agent will ingest and act on untrusted, user-generated third-party content that can change booking decisions.