linkfox-temu-fulfillment-us

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill's examples and CLI usage show passing API keys/accessToken as literal values (exporting "" and embedding "accessToken":"TOKEN" in the single-quoted JSON CLI argument), which encourages including secret values verbatim in generated commands or output.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 该 skill 通过 POST /temu/proxy 运行各类履约查询/操作脚本，并会把 Temu/网关返回的 body（包含如 failReasonText、warningMessage、assistantAgreementText 等自由文本字段）解析后写入/打印，从而在 LLM 运行时摄入了外部（非第一方）生成的文本内容。