pp-booking-com

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow is the Booking.com Printing Press CLI “direct use” that executes agent-provided commands like booking-com-pp-cli destinations ... --query <ss text>, hotels list, reviews, wishlist, and trips, which ingest outsider-authored free text (e.g., the agent’s --query/natural-language inputs) into Booking.com request flows that the CLI then parses/returns.