ai-amazon-return-reduction
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). 该技能在运行时会接收用户提供的
materialUrl(公开商品/店铺/竞品/评价页面链接)并将其页面正文作为可读文本纳入上下文进行分析,因此存在“外部网页自由文本(含潜在提示注入)→ LLM上下文”的间接注入路径。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata