ecommerce-1688-product-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow queries an external wholesale platform (1688) for product listings and supplier details, which contain unverified third-party text fields.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill makes requests to an external API endpoint hosted at nexscope.ai via environment variables, constituting an unverifiable third-party operational dependency.