pricewin-hotel-deal-finder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). During required runtime (search.js → bin/browse.js → bin/daemon.js), the stealth browser’s snapshot() reads hotel listing DOM text/ARIA labels/attributes from Booking.com/Agoda/Google (outsider-authored web content) and returns it to the agent in [ref] ... free text form via snapshot.