buying-and-selling-items

Warn

Audited by Snyk on Feb 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's workflow explicitly requires web searches and fetching platform help/terms (see SKILL.md "Research" step and reference.md "Use web search and comparable listings", and marketplace-requirements.md which even links to Finn/eBay/Facebook help), so the agent will ingest public, untrusted third-party content that can influence pricing and listing actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 21, 2026, 03:59 PM