shop-app-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text (the user’s query, handle, collection_id, selected_options, etc.) is passed into Crawlora API endpoints like /shop-app/search, /shop-app/products/{id}/reviews, and /shop-app/shops/{handle}/products which return and are then analyzed by the agent.