goofish-item-detail

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider free text is ingested when the skill navigates to a Goofish item detail page and runs scripts/extract-item-detail.py, which reads document.body.innerText/DOM text (e.g., listing title/description, seller labels, tags) authored by the listing’s external seller.