search-for-service

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill queries and displays results from the public x402 bazaar marketplace (via the npx awal x402 bazaar search / list commands and CDP API) and can fetch arbitrary endpoint URLs with details <url>, meaning it ingests and surfaces untrusted third-party web content as part of its workflow.