hotel-hunting

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Phase 2/4 the skill instructs the agent to read and mine outsider-authored free text from external sources—explicitly “recent Reddit threads, travel forums, personal blogs, YouTube room tours, and credible trip reports” and “complaint mining” that includes Reddit—via web_search/web_extract/browser extraction at runtime.