travel-guide

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Yes — the SKILL.md workflow requires using the internet_search tool to fetch public web results (e.g., "{目的地} 旅游攻略 必去景点") and uses those untrusted, user-generated or open-web search results to select attractions and shape itinerary decisions, which can materially influence subsequent planning and actions.