opentable

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). OpenClaw browser automation navigates to opentable.com search/restaurant pages and then uses openclaw browser snapshot to ingest the page’s rendered text (restaurant listings, slot availability, booking confirmation) into the agent’s LLM context; this is outsider-authored public web content fetched at runtime.