taobao-keyword-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested from Taobao search results pages at runtime via browser-act → navigate https://s.taobao.com/search?... and then eval "$(python scripts/search-products.py ...)", where the script reads product card DOM text (titles, shop names, tags, sales counts) authored by Taobao sellers/other users.