hs-code-lookup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent in Step 2 to perform web searches ("Start with a web search like: HS code [product name]" and "use web search to find the precise code"), which requires fetching and reading open/public third‑party web content that the agent will interpret to choose classifications.