facebook-marketplace-listing-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to scrape public Facebook Marketplace pages and listings via browser automation, where listing titles, descriptions, and seller info are authored by arbitrary third parties.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill fetches and installs external runtime instructions and skill material from a third-party GitHub repository via an unverified redirect locator, presenting weak provenance and triggering a high tier dependency.