sellersprite-rpa

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/core_dom.py, the DOM-scrape workflows for keywords_fetch_station and markets_fetch_station use common.evaluate(...) to extract free-text from sellersprite v2 HTML tables after navigation/click, and that HTML content is populated from user-controllable query inputs like --keyword (via sections.keywords_build_url / fill_input_by_placeholder).