travel-requirements-expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's Phase 3 research workflow explicitly instructs using Exa and Firecrawl to fetch and scrape open/public web pages (e.g., the exa_research.py commands and "firecrawl scrape [discovered-URL] --only-main-content") and then requires the agent to read and act on those findings to build itineraries and follow-up questions, so untrusted third‑party content can directly influence decisions and tool use.