amazon-search-listing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/extract-search-results.py, the skill uses browser-act to evaluate attacker-influenced Amazon SERP/category HTML already on the page (via user-provided Amazon search/category URLs) and extracts free text from DOM elements like h2 titles, badge labels, ratings aria-labels, and delivery text from [data-component-type="s-search-result"].