linkfox-temu-cancel-order-us

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes examples and instructions that embed API keys/tokens directly in CLI/JSON (e.g., export LINKFOXAGENT_API_KEY and inline "accessToken":"TOKEN"), which would require an LLM to insert secret values verbatim into generated commands or payloads.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 该 skill 的运行路径通过 scripts/<...>.py -> _us_cancel_order_script.run_cli -> us_proxy_call -> call_temu_api 把调用方在 sys.argv/JSON 参数中提供的字段（如 params.request.*、reason.description、applyOrder.*）原样转发到 https://tool-gateway.linkfox.com/temu/proxy 并读取其响应（含自由文本字段如 errorMsg/message），因此存在“外部用户可注入自由文本进入网关并被 LLM 读取”的间接提示注入暴露。