trip-email-html-itinerary

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow ingests user-provided travel emails/confirmations (free-form text) and extracts their contents into the model’s context for itinerary generation, which is an outsider-source category when the emails were authored by other parties (e.g., airlines/hotels/tour operators) and thus can carry indirect prompt-injection payloads.