travel-planner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly instructs the agent to "Use web search to gather current information" (Step 4: "Research Destination" and the listed search topics), which requires ingesting open/public third-party content (web pages, travel sites, forums) that is untrusted and will be interpreted as part of the travel-planning workflow.