linkfox-seerfar-ozon-market-keyword-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text can enter the LLM context via the runtime API response body (e.g., data[*].query, queryCn, categoryInfos[*].title*, products[*].title) returned from the external Seerfar/Ozon endpoint and then printed to stdout (full JSON when ≤8KB or with --inline), which the agent may ingest into its LLM context.