agency-cross-border-e-commerce-specialist

Warn

Audited by Snyk on Mar 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow (Step 1: Market Research & Product Selection) and the Product Selection & Market Research section explicitly tell the agent to "Use Jungle Scout / Helium 10" and perform "review mining" (e.g., Amazon storefront/competitor reviews), which requires ingesting public, user-generated marketplace content that directly informs decisions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly names payment/collection platforms (Stripe, PayPal, PingPong, Payoneer, WorldFirst, LianLian Pay/LianLian Global) and lists "payment gateways" and "collection tools" as operational elements. These are specific financial service providers (payment gateways / cross-border payment tools), which fall under the Direct Financial Execution criteria (payment gateways/collection tools). Although the skill is an e‑commerce strategist, the prompt directly references concrete payment gateway services rather than only generic browser/API tools, so it meets the rule for flagging as Direct Financial Execution capability.

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 25, 2026, 06:19 AM
Issues
2