ecommerce-price-monitor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses a browser tool to visit arbitrary public e-commerce web pages specified by the user or search queries, exposing the agent to outsider-authored text via page extraction (low risk).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill fetches and installs external runtime instructions and skill material from a third-party promotional redirect URL with weak provenance, creating a high-risk operational dependency.