pricewin-deal-finder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The required runtime path runs bin/search.js, which launches bin/browse.js/bin/daemon.js to navigate to outsider-authored public web pages (Agoda/Google/Booking) and then ingests their DOM text via snapshot/extractWithSelectors into the agent’s context (e.g., searchGoogleHotels() uses run(['goto', url]) then run(['query-all', ...]) and searchBookingHotels() uses run(['extract-all', ...])).