pricewin-deal-finder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes: the required runtime workflow runs node bin/search.js ..., which launches the Patchright daemon that navigates to outsider-authored web pages (Agoda/Booking/Google/OpenTravel) and then feeds extracted DOM text (hotel names/prices/aria-labels) back through stdout/JSON into the agent’s LLM context.