amazon-sales-estimator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Mode B and C explicitly call web_fetch/web_search to scrape Amazon product pages and search results (site:amazon.com), ingesting public third‑party page content (titles, BSR, reviews, etc.) that the agent parses and uses to drive estimates and market-analysis actions, so untrusted page content could indirectly influence behavior.