browser-booking-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly instructs the agent to "navigate and complete booking/search flow" on external sites and the verification checklist (references/verification-checklist.md) requires reading site/page URLs, prices, cancellation terms, and confirmation details — clearly ingesting untrusted public web content that the agent must interpret and that could influence its actions.