linkfox-amazon-store-orders

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow retrieves Amazon seller orders and buyer details via API calls, which can contain untrusted third-party buyer-submitted text (such as order items, addresses, or buyer notes).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill makes runtime HTTP requests to LinkFox API endpoints (tool-gateway.linkfox.com, api.linkfox.com, agent-api.linkfox.com) hosted on an unofficial commercial domain to fetch authentication tokens, user accounts, and billing/plans during setup and operation, constituting an external runtime dependency with weak or unknown provenance.