pp-hotel-goat

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required runtime workflow for this skill invokes the hotel-goat-pp-cli to scrape Google Hotels server-rendered pages and/or call the public Trivago MCP server, so outsider-authored free text from those third-party web sources is ingested into the agent’s LLM context via the CLI’s JSON results.