ecommerce-tiktok-new-product-rank

Warn

Audited by Snyk on Aug 31, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The agent queries structured product ranking data via an API endpoint (/echotik/listNewProductRank), which returns metadata and product titles written by merchants and creators. Since these product titles and descriptions are authored by third-party sellers on TikTok Shop and ingested directly into the agent's context, this constitutes indirect prompt injection via a community/marketplace data source.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 31, 2026, 05:39 AM
Issues
1
Security Audit — snyk — ecommerce-tiktok-new-product-rank