agency-cross-border-e-commerce-specialist
Warn
Audited by Snyk on Mar 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow (Step 1: Market Research & Product Selection) and the Product Selection & Market Research section explicitly tell the agent to "Use Jungle Scout / Helium 10" and perform "review mining" (e.g., Amazon storefront/competitor reviews), which requires ingesting public, user-generated marketplace content that directly informs decisions.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly names payment/collection platforms (Stripe, PayPal, PingPong, Payoneer, WorldFirst, LianLian Pay/LianLian Global) and lists "payment gateways" and "collection tools" as operational elements. These are specific financial service providers (payment gateways / cross-border payment tools), which fall under the Direct Financial Execution criteria (payment gateways/collection tools). Although the skill is an e‑commerce strategist, the prompt directly references concrete payment gateway services rather than only generic browser/API tools, so it meets the rule for flagging as Direct Financial Execution capability.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata