ai-amazon-listing-images

Warn

Audited by Snyk on Jun 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). 该技能的运行时上下文由用户提供的 materialUrl/materialText/materialFile 进入 contextComposer;其中 materialUrl 允许用户传入公开网页/商品/评论/竞品链接,技能在执行时可能抓取其正文作为可读文本,从而引入“公共网页/第三方内容”这类外部自由文本的间接提示注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 13, 2026, 03:30 AM
Issues
1
Security Audit — snyk — ai-amazon-listing-images