linkfox-temu-ads-eu

Warn

Audited by Snyk on Sep 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The required workflow invokes Temu Ads API endpoints through a gateway that returns third-party seller platform data (such as ad operation logs and failure reasons), which can contain outsider-authored text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill provides tools and API wrappers for managing Temu European e-commerce ads (linkfox-temu-ads-eu). Although it mentions "广告投放、广告计划、广告组、创意、出价、预算" (advertising, ad campaigns, ad groups, creative, bidding, budget), according to the rule: "Managing Ad Spend Budgets (specifically the API to update the budget, not just viewing ads)" triggers direct financial execution. Line 79 explicitly mentions eu_ads_searchrec_ad_modify.py and line 3 mentions budget/bidding management (预算出价), which are ad platform budget/bidding adjustments executed programmatically via the API.

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 07:12 AM
Issues
2