linkfox-temu-order-us

Warn

Audited by Snyk on Aug 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 本 skill 的运行时会把用户在 CLI 参数中提供的 JSON(其中可含外部任意字符串字段,如请求筛选条件与自定义内容相关字段)经由 temu_us_proxy/us_file_download_call 直接作为 Temu 网关请求体转发并返回响应摘要/落盘,其中 emit_result() 会在超小响应时把返回 JSON 作为可读文本直接输出到上下文。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 17, 2026, 07:05 AM
Issues
1
Security Audit — snyk — linkfox-temu-order-us