taobao-product-reviews

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The skill loads Taobao product review text from the live page DOM (outsider-authored customer reviews) via eval "$(python scripts/extract-reviews.py '{itemId}')" which runs JS to read [class*="Comment--"] elements and returns their textContent into the agent context.