linkfox-temu-price-eu

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly shows commands and JSON examples that require embedding API keys/accessTokens verbatim (export LINKFOXAGENT_API_KEY and "accessToken": "TOKEN" passed on the command line), forcing secrets into generated commands/outputs.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 在 scripts/_temu_eu_common.py::eu_proxy_call 通过 /temu/proxy 发送用户在 CLI JSON 中提供的 params（外部自由文本）到网关，网关返回的 body 又在 scripts/_temu_common.py::emit_result 中被解析并落盘/摘要输出，构成间接提示注入暴露面。