linkfox-temu-tax-eu

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime workflow: the scripts (e.g., scripts/temu_eu_proxy.py calling eu_proxy_call → call_temu_api) ingest user-supplied JSON free text via CLI args (load_json_arg(sys.argv)) and then forward it as the type and params body to POST https://tool-gateway.linkfox.com/temu/proxy, with no restriction that forces selecting a specific pre-defined item before the LLM ingests the attacker text.