linkfox-shopee-store-bundle-deal
Warn
Audited by Snyk on Aug 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行时通过
scripts/bundle_deal_api.py读取用户传入的 JSON 参数并调用POST /shopee/developerProxy，其中实际返回的developerProxy响应体（包含任意字符串字段）会被_shopee_bundle_deal_common.emit_result()序列化并摘要打印/落盘，等同于将外部自由文本（来自第三方 API 响应）直接喂给下游上下文。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata