facebook-marketplace-seller
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Stage 5b (
facebook-marketplace-seller-reply-composer) loads buyer-authored inbound message text at runtime (viafacebook-marketplace-buyer-inbox-triage/facebook-marketplace-inbox-heartbeatand the explicittext: "<inbound_text>"handoff intofacebook-marketplace-safety-guard), enabling indirect prompt-injection from free-form buyer messages.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill opens and scrapes a live Facebook listing URL at runtime (e.g. "https://www.facebook.com/marketplace/item/2051040935507757/"), and the extracted page content is injected into the agent's listing context which directly controls drafting/reply behavior.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata