ecommerce-web-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses a web search tool to retrieve and extract content from arbitrary web pages and search results, exposing the agent to outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill makes runtime API calls to https://www.nexscope.ai/help/skills-external-access?co-from=skillNS and ${NEXSCOPE_PROXY_BASE}/api/v1/tools/research/tsearch/search, representing a weak/unknown/suspicious operational dependency.