linkfox-amazon-ads-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 该 skill 的运行时通过 scripts/_common.py 在 parse_argv_params() 直接解析外部传入的 sys.argv[1] JSON 后调用 call_gateway() 把未净化的 payload/body/queryString 经 POST /amazonAds/developerProxy 发往上游读取/返回数据。

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly provides create/update operations that modify campaign budgets, bids and budget rules (i.e., ad spend controls) and warns these changes "直接影响广告花费" and "立即生效且无法撤回". It includes scripts for updating campaigns (budget/strategy), creating/updating budget rules and associating them, across SP/SB/SD. Managing/updating ad budgets is a direct ad-spend execution capability per the policy.