hotel-finder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill issues runtime queries to the external Camino API (https://api.getcamino.ai/query) and directly consumes and displays the API's JSON "results" and "answer" output, which is third-party public content that could include untrusted/user-generated data and therefore enable indirect prompt injection.