linkfox-temu-order-us

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill's examples and CLI usage instruct including secrets (LINKFOXAGENT_API_KEY export and "accessToken" values) directly in shell/JSON command arguments, which would require the LLM to emit secret values verbatim if asked to produce or run those commands.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Required workflow calls Temu gateway endpoints at runtime and then prints/summarizes the gateway JSON response (including free-text fields like errorMsg, warning, customizedText, etc.) into the agent’s LLM context via stdout; this response is outsider-authored data from Temu/Partner systems.