ai-amazon-return-reduction

Warn

Audited by Snyk on Jun 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). 该技能在运行时会接收用户提供的 materialUrl(公开商品/店铺/竞品/评价页面链接)并将其页面正文作为可读文本纳入上下文进行分析,因此存在“外部网页自由文本(含潜在提示注入)→ LLM上下文”的间接注入路径。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 13, 2026, 03:30 AM
Issues
1
Security Audit — snyk — ai-amazon-return-reduction