cn-ecommerce-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill fetches and parses product pages and search results from public Chinese e‑commerce sites (Taobao, Tmall, 1688, AliExpress) and accepts arbitrary product URLs, so it ingests untrusted, third‑party/user‑provided content (product descriptions, listings, reviews) that the agent must read and interpret.