taobao-product-detail

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill navigates to a Taobao/Tmall product page and runs scripts/extract-product.py, which reads document.body.textContent and other DOM text from that page (outsider-authored web content), then feeds the extracted free text (e.g., title/shopName/attributes/reviewCount) into the agent’s LLM context via the tool output.