resale-secondhand-research
Warn
Audited by Snyk on Aug 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Skill runtime path calls Crawlora API endpoints like
/poshmark/search(query),/etsy/search(q),/vinted/catalog(search_text), and other listing-detail/reviews endpoints; these ingest provider-returned listing/storefront text originating from outsider user submissions (e.g., listing descriptions, reviews, seller bios) into the agent’s LLM context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata