linkfox-amazon-store-report
Warn
Audited by Snyk on May 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). 运行时会通过
get_report.py调用依赖 skill 的/spApi/storeTokens与/spApi/developerProxy获取并下载报告文件内容(外部来源:Amazon Reports API 返回的文档/TSV/GZIP 解压文本会被读取并预览),这些文本会进入脚本输出/上下文。
MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
- Hidden Unicode characters detected (1 type(s) found)
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W021
MEDIUMHidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
Audit Metadata