amazon-global-selling

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). Both SKILL.md and README_CN.md explicitly state the skill uses general web search (“使用通用搜索引擎 (web_search)” and “市场数据来自网络搜索、亚马逊 marketplace报告”) to fetch public third‑party market and regulatory content that the agent is expected to read and use to drive market-selection, compliance, and logistics decisions, so untrusted external content could materially influence actions.