product-price-monitor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow’s Tick step explicitly re-fetches and ingests a bounded “source” page via web_extract/browser_navigate based on the watch contract (Setup/Fetched baseline and Tick/Fetch and normalize), meaning outsider-authored page text can be processed at runtime.