linkfox-temu-product-query

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One high-risk item is present: a direct downloadable release.zip hosted on agent-files.linkfox.com (an archive that could contain executables and is distributed outside official package managers), while the other links are API/docs endpoints on the same domain and are lower risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). scripts/temu_product_query.py 在运行时调用外部网关接口并把返回的 JSON（含产品标题/标签等自由文本字段）直接序列化并打印到 stdout/摘要，随后会进入代理的 LLM 上下文；该自由文本来自上游 Temu/网关响应，属于“公共/外部运行时获取内容”。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). SKILL.md instructs the agent at runtime to download and install remote skill code from https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip (fetch+install of a skill can execute remote code or change agent prompts), so this external URL is flagged.