linkfox-echotik-list-product

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md’s required runtime workflow, user-supplied keyword/filters are sent to POST /echotik/listProduct in scripts/echotik_list_product.py, and the resulting free-text fields in the API response (e.g., product names/descriptions/status texts) are then written/printed for the agent/LLM to consume.