airbnb-com-sg

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow searches and reads property listings from Airbnb, which constitutes outsider-authored content from public listings and user reviews fetched via search/read tools.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs connection to a remote Model Context Protocol (MCP) server at https://unbrowse.ai/mcp/airbnb.com.sg for operational instructions and tools, which represents a third-party/unofficial runtime external dependency with medium provenance.