linkfox-ruiguan-utility-patent-detection

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path POST /ruiguan/utilityPatentDetection takes user-supplied free text fields productTitle and productDescription, which the tool sends to the backend and then ingests/prints the backend’s returned patent text.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I scanned the skill files for literal high-entropy credentials. Most references to keys are environment-variable names or placeholders (e.g., LINKFOX_AGENT_API_KEY, $LINKFOXAGENT_API_KEY, Authorization headers using env vars) which are documentation/placeholder usage and not secrets.

However, scripts/onboarding.py contains a hardcoded base64url string assigned to _LOGIN_FIXED_UID: "eyJhX2lkIjoiNmEyMmM4YjA1YmM5MTZhIiwiZF9pZCI6IiJ9" This is a long, encoded JSON/JWT-like value described in-code as a "fixed uid header（实测可用）" and is used as a fallback uid header in requests. Because it is a literal, high-entropy token embedded in the code and used as an identity header, it qualifies as an exposed credential rather than a mere placeholder.