linkfox-seerfar-ozon-category-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Most URLs are official API, documentation or image links on linkfox/ozon domains and look benign, but the direct archive download (release.zip) referenced in SKILL.md is a downloadable package intended to be installed and therefore is a higher-risk distribution vector that should be treated cautiously and require user authorization/verification before fetching or executing.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text can enter the LLM context via the runtime API response body (product titles/brand/seller names and category paths) returned from POST /seerfar/ozon/categorySearch, which the script prints to stdout (full JSON when ≤8KB or when --inline is used), and that stdout is then available to the agent/LLM.