linkfox-shopee-product-detail

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent skill queries Shopee product details via an API tool where the user supplies a specific product URL, making the external product page content fetched at runtime a low-risk user-selected URL source.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill makes programmatic outbound HTTP calls to third-party endpoints and a tool gateway (tool-gateway.linkfox.com, skill-api.linkfox.com, and api.linkfox.com) at runtime, which act as unverified external dependencies without strong cryptographic provenance or verification.