goofish-search-list

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text from Goofish search result item cards (titles, service tags, price-desc, seller location) is read from the live DOM after navigate https://www.goofish.com/search?... and eval "$(python scripts/extract-search-items.py)", then inserted into the agent’s LLM context via the JSON output.