amazon-assistant
Warn
Audited by Snyk on Aug 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The Amazon Assistant runtime launches Playwright to scrape Amazon pages such as
/s(search results) and/dp/<ASIN>(product/reviews) after the user issues a search or product command, thereby ingesting outsider-authored free text from Amazon pages (titles, review bodies, availability text, etc.) at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata