zergbnb-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow searches and retrieves listing details and property reviews from a rental platform (zergbnb.com), which can contain user-submitted content like reviews or descriptions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes capabilities to "book and cancel reservations" and "administer payments" (as well as booking via reservations book and charging real cards via admin set-mode live), which explicitly constitutes direct financial execution/payment operations for transactions.