fetch-listing-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill calls AliExpress Affiliate API at runtime and ingests the returned JSON (including free-text fields like product_title and shop_name) into the agent’s context via the script’s printed output; these strings originate from an external third party (AliExpress sellers/affiliate catalogue), i.e., outsider-authored content.