qinghu-ecom-sourcing
Warn
Audited by Snyk on Sep 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The agent skill calls tools that retrieve e-commerce data, product details, reviews, and search results from external platforms (Amazon, Shopee, TikTok, Ozon, 1688, etc.) via API endpoints, which can contain user- and outsider-submitted free text such as product reviews and descriptions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata