road-trip-planner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's mandatory workflow requires using web_search/web browser tools and public place lookups to fetch driving times, attraction hours, weather, and coordinates from open/public websites and Google Maps—content the agent must read and act on to change routes and itinerary decisions—therefore it ingests untrusted third‑party content that could carry indirect instructions.