linkfox-dld-product-billboard

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill calls a third-party API (https://tool-gateway.linkfox.com/dld/productBillboard) and then feeds the returned product fields (e.g., title, company, asinUrl) into the agent’s response/LLM context; these fields originate from 1688/LinkFox tooling rather than the operating user, so they are outsider-authored free text at runtime.