amazon-market-trend-scanner

Warn

Audited by Snyk on Aug 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). SKILL.md’s required runtime workflow for this skill calls the bundled CLI (/scripts/zoodata.py) which POSTs user-provided categoryPath/keywords into ZooData API endpoints like categories --keyword, market --category, and products --keyword (outsider text), but it does not ingest arbitrary outsider-authored free text from third-party feeds/queues/issue bodies without the agent first selecting a specific category/watch target.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 25, 2026, 11:17 AM
Issues
1
Security Audit — snyk — amazon-market-trend-scanner