linkfox-temu-returns-refunds-global

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill documentation and examples show exporting API keys and passing accessToken values directly on the command line / in inline JSON (e.g., export LINKFOXAGENT_API_KEY and python scripts with "accessToken":"TOKEN"), which would require an LLM to include secret values verbatim in generated commands or code — an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). 该 skill 在运行时通过 scripts/_global_returns_refunds_script.run_cli 将用户输入的 JSON 直接用于 temu_global_proxy.py 调用 POST https://tool-gateway.linkfox.com/temu/proxy，并将网关返回的 body 解析/摘要输出（但无从“先选择特定 item”才能摄取的外部自由文本投喂通道）。