taobao-shop-catalog

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill navigates to a Taobao/Tmall shop catalog URL and then runs scripts/extract-catalog.py, which executes JS to read product card text/links/images from the page DOM (document.querySelectorAll('.item')), i.e., free-form content authored by the shop/third parties that the user did not author.