linkfox-temu-ads-eu
Warn
Audited by Snyk on Sep 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required workflow invokes Temu Ads API endpoints through a gateway that returns third-party seller platform data (such as ad operation logs and failure reasons), which can contain outsider-authored text.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill provides tools and API wrappers for managing Temu European e-commerce ads (
linkfox-temu-ads-eu). Although it mentions "广告投放、广告计划、广告组、创意、出价、预算" (advertising, ad campaigns, ad groups, creative, bidding, budget), according to the rule: "Managing Ad Spend Budgets (specifically the API to update the budget, not just viewing ads)" triggers direct financial execution. Line 79 explicitly mentionseu_ads_searchrec_ad_modify.pyand line 3 mentions budget/bidding management (预算出价), which are ad platform budget/bidding adjustments executed programmatically via the API.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata