vinted-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Vinted listing titles, descriptions and buyer review text are outsider-authored, and the required workflow reads them after the agent runs a keyword search (step 1) and reads a listing (step 4), so an attacker can publish poison but cannot force delivery to a given query.