walmart-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill fetches product data, reviews, and search results from the Crawlora API for Walmart, allowing the agent to read external product pages and user reviews where outsiders can submit text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill makes runtime calls to the Crawlora API at api.crawlora.net, which is an unknown third-party service provider lacking official provenance or independent verification, making it a weak operational dependency.