nike-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow calls Crawlora API endpoints like /nike/search and then fetches /nike/product and /nike/product/reviews using slug and style_color derived from those search results, so outsider-authored free text can be submitted as the user-provided keyword/query without first selecting a specific item.