@tank/flight-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime, the required workflow for the primary search (search_google_flights.py → fast_flights with fetch_mode="local") uses Playwright to fetch Google Flights pages and parse the resulting HTML/accessibility content into the tool output, which is then returned to the agent/LLM as readable text/JSON; this is effectively public web content from Google (outsider-authored).