linkfox-etsy-product-detail

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Etsy_Product_Detail Lookup ingests only first-party Etsy listing page content fetched from a specific direct productUrl parameter (/listing/<numeric-id>), and there is no runtime path that reads arbitrary outsider-authored free text from feeds/queues/search results without the agent selecting a specific listing URL first.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I scanned the Skill docs and scripts for literal, high-entropy credentials. Most occurrences are environment variable names, placeholders, or example values (e.g., LINKFOX_AGENT_API_KEY, sample Etsy URLs, "your-key-here") which per rules are ignored.

I found one literal high-entropy value: the base64url string assigned as the default for _LOGIN_FIXED_UID in scripts/onboarding.py. It is not a placeholder, is a compact random-looking string, and is used as a UID header fallback ("登录链路固定 uid header（实测可用）"), which makes it a usable credential-like value — so I flag it.