zara-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). At runtime, user-supplied query text is sent as the query parameter to Crawlora’s /zara/search (and /zara/suggest), which the skill then ingests as normalized Zara product data (not arbitrary outsider-authored content, but the workflow reads upstream-generated strings derived from provider search results rather than monitored outsider feeds).