skills/serendipityoneinc/zoodata-skills/amazon-pricing-command-center/Snyk

amazon-pricing-command-center

Warn

Audited by Snyk on Aug 25, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). SKILL.md→pricingsignal workflow uses ZooData CLI zoodata.py which ingests caller-provided free text (ASINs) and then fetches/reads API-returned freeform product fields like titles/descriptions/features from realtime/product (including competitor-derived ASINs in batch analyses), which the agent then conditions its report on.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 25, 2026, 11:17 AM

Issues

1

Security Audit — snyk — amazon-pricing-command-center