linkfox-dld-product-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md/scripts/dld_product_search.py calls the external endpoint /dld/productSearch and then directly prints/summarizes the returned product listing text (e.g., title) without any “select a specific item” step, so the attacker can poison the data by submitting a search keyword (keyWord/goodsUrl/productIds) that the workflow consumes.