1688-product-detail
Warn
Audited by Snyk on Aug 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The skill only reads already-open, publicly rendered 1688 offer detail page data via DOM extraction and auto-fired 1688 XHR (e.g.,
window.context...dataJsononhttps://detail.1688.com/offer/{offer_id}.html), rather than monitoring a provider queue/feed that an outsider can post into without the user selecting an offer.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata