linkfox-amazon-store-customer-feedback

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill runtime path scripts/* → _spapi_customer_feedback_common.run_item_get/run_browse_node_get calls developerProxy_get(..., path, query_string) which POSTs JSON to /spApi/developerProxy and then LLM ingests/prints/summarizes the returned developerProxy.body JSON (including seller/item/browse-node response text) without any special filtering of that response.