search-product
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill fetches real-time Amazon product listings from the public RapidAPI endpoint (https://real-time-amazon-data.p.rapidapi.com/search as defined in skill-router.json) and the SKILL.md instructs the agent to read and return those product titles, descriptions, URLs, and metadata, which are untrusted third-party content that can influence recommendations or follow-up actions.
Audit Metadata