foresttrip-vacancy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill queries lodging/camping vacancy data from foresttrip.go.kr, which is a public reservation system where facility names and descriptions are authored by third-party recreation site operators or administrators.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill uses npm and git/GitHub URLs (github.com/NomaDamas/k-skill) as a runtime package and instruction installer (npx -y @nomadamas/k-skill@0), presenting a weak/unknown external dependency tier.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documentation mentions continuing into an official booking flow with approval-gated payment on foresttrip.go.kr (a direct payment/purchase operation). However, the execution layer/service relies on user approval instructions ("approval-gated payment", "Never execute payment ... without the user's explicit approval immediately beforehand") rather than an independent service-enforced authentication/authorization check for the payment route itself, leaving the direct payment operation without qualifying independent control.