etsy-shop-catalog

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The skill explicitly claims it "never bypasses authentication or access controls" but then instructs operators to "switch to a stealth browser with a different fingerprint / proxy" to evade DataDome anti-bot checks, a deceptive instruction that contradicts the stated boundary.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md + scripts/extract-listings.py load an attacker-influenced Etsy shop URL in the browser and then extract LLM-readable free text from the resulting product listing cards (e.g., titles, prices, badges, and cardText) without requiring selection of a specific item beyond pagination.