ecommerce-tiktok-new-product-rank
Warn
Audited by Snyk on Aug 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The agent queries structured product ranking data via an API endpoint (
/echotik/listNewProductRank), which returns metadata and product titles written by merchants and creators. Since these product titles and descriptions are authored by third-party sellers on TikTok Shop and ingested directly into the agent's context, this constitutes indirect prompt injection via a community/marketplace data source.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata