amazon-buy-box

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md and README_CN.md explicitly state the skill uses a web_fetch tool to scrape public Amazon product/Buy Box pages for current buy box holders, prices and shipping info, and the agent is expected to read and base pricing/fulfillment decisions on that scraped third‑party content, creating exposure to untrusted public content that could carry indirect prompt injections.