pp-rakuten-travel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill searches and extracts public accommodation details and travel offers from Rakuten Travel via a CLI, representing low-risk ingestion of external web content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs installation of an external CLI tool via npm (@mvanhorn/printing-press-library) and Go (github.mvanhorn/printing-press-library/...), which are third-party/personal repositories representing an unofficial operational dependency.