linkfox-shopee-store-ads

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). 该 skill 的运行路径是 scripts/ads_api.py → _ads_api_runner.py:run_ads_api() → _shopee_ads_common.py:developer_proxy_call()/call_api()：它会把用户在 CLI 里提供的 api/JSON 参数拼成请求并把网关/上游返回的 JSON（含任意字符串字段）直接落盘与在必要时打印摘要到 stdout，但它并不从外部“无选择地”摄取第三方作者的自由文本流。

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill exposes Shopee Ads APIs that can create and edit ad campaigns and retrieve/set ad budget suggestions (e.g., create_manual_product_ads, edit_manual_product_ads, create_gms_product_campaign, get_create_product_ad_budget_suggestion, get_total_balance). Those endpoints enable changing ad spend and managing ad budgets — which is classified as Direct Financial Execution (managing ad spend budgets) under the policy.