linkfox-temu-ads-global

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly shows placing API keys/access tokens into environment variables and, critically, into command-line JSON arguments (e.g., python scripts '' containing "accessToken"), which requires embedding secret values verbatim in commands/outputs and therefore creates an exfiltration risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill exposes Temu Ads APIs and scripts for creating and modifying ads (e.g., temu.searchrec.ad.create and temu.searchrec.ad.modify) and a gateway endpoint to call those APIs. Creating or modifying ads normally includes setting/updating campaign budgets and launching spend, which is an explicit ad-spend management capability (i.e., direct financial execution for advertising budgets).