qinghu-ecom-sourcing

Warn

Audited by Snyk on Sep 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The agent skill calls tools that retrieve e-commerce data, product details, reviews, and search results from external platforms (Amazon, Shopee, TikTok, Ozon, 1688, etc.) via API endpoints, which can contain user- and outsider-submitted free text such as product reviews and descriptions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 21, 2026, 04:08 PM
Issues
1