etsy-keyword-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Etsy skill loads and extracts free-form text from whatever is rendered on the outsider-authored Etsy public search results pages the user navigates to (browser /search?q=...&page=... → scripts/extract-listings.py reads DOM text from listing cards, including titles/shop text/prices).