linkfox-ehunt-etsy-store-query

Warn

Audited by Snyk on May 30, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). 该技能在运行时通过 LinkFox MCP 工具 _ehunt_storeQuery 调用上游“第三方数据服务”并把其 JSON 响应(含 stores 等字段的可读文本)直接进入代理上下文;由于上游内容来源于非用户选择引入的第三方数据服务,属于外部作者/来源的自由文本/字段内容注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 30, 2026, 12:05 AM
Issues
1