amazon-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly states it "Uses the SearchAPI Amazon Search engine to query Amazon's catalog" and returns organic_results (title, link, reviews, ratings) from public Amazon pages—i.e., it fetches and ingests open, third-party user-generated content (reviews) which the agent is expected to read and use to make product recommendations/decisions.