Security audit
Stayfinder
Security checks for vulnerabilities and agentic risk
Overview
StayFinder appears to be a legitimate lodging-search plugin, but users should know it sends trip search details to StayFinder and stores a local API token.
Before installing, be aware that StayFinder is not just an instruction file: it runs plugin code, sends your lodging search details to the StayFinder service, and stores a local API token for future use. The shown behavior is consistent with its stated purpose.
Static analysis
No suspicious patterns detected.