amz-cogs-tax-pack

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests outsider-authored free text from Amazon Seller Central reports at runtime (e.g., “Inventory Valuation Report,” “All Statements/Settlement Reports,” “Inventory Age Report”), which are generated from third-party marketplace data and become readable text in the agent’s LLM context.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). The document contains a literal WhatsApp invite URL: https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY. This is a high-entropy, usable invite token that grants access to the WhatsApp group (i.e., provides access to a service). It is not a placeholder or example string and therefore meets the definition of a secret in this context. No other API keys, private keys, or high-entropy credentials are present.