listing-keyword-optimizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill calls NexScope proxy endpoints that return competitor product listings (e.g., /api/v1/tools/linkfox/amazon/search and /api/v1/tools/linkfox/amazon/product/detail), and it then ingests competitor titles/brand fields as readable text into the LLM context via competitor_titles → build_product_context(... source_text_parts.append(' '.join(competitor_titles[:5])) ...) and extract_title_keywords(competitor_titles).