ebay-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime path calls scripts/search_ebay.sh, which POSTs to Frevana and then reads the HTTP response body ($RESPONSE_FILE) as text and validates/parses it with python3, so any free-form text contained in that outsider-authored API response is ingested into the agent’s LLM context via stdout (and error output on failure).