walmart-category-listing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s runtime workflow loads a user-supplied Walmart browse/category page via the browser and then runs scripts/extract-listing.py to read window.NEXT_DATA.props.pageProps.initialData.searchResult from that page’s DOM, meaning outsider-authored free text is ingested from whatever page contents the user navigates to.