travel-plan-spreadsheet-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow (references/research-policy.md and SKILL.md) explicitly instructs the agent to verify volatile facts by reading public third‑party websites (embassy/airline/event pages) and to record those plain‑text URLs in the Sources sheet, meaning the agent will ingest and act on open web content that can influence planning decisions.