shop-app-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent retrieves product listings, search results, and customer reviews from Shop.app via the Crawlora API, which contains outsider-authored free text without requiring the agent to select a specific item first.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill makes runtime HTTP requests to the Crawlora API at api.crawlora.net, which is an ordinary third-party SaaS provider without strong, verifiable enterprise provenance or cryptographic anchoring.