ai-amazon-listing-images
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). 该技能的运行时上下文由用户提供的
materialUrl/materialText/materialFile进入contextComposer;其中materialUrl允许用户传入公开网页/商品/评论/竞品链接,技能在执行时可能抓取其正文作为可读文本,从而引入“公共网页/第三方内容”这类外部自由文本的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata