pp-amazon-orders
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's SKILL.md shows the CLI imports browser cookies and performs
amazon-orders-pp-cli sync/--data-source livereads of Amazon order pages (see "Auth Setup", "Hand-written commands", and "Freshness Contract"), so the agent fetches and parses third-party Amazon web content (seller/item/tracking text) as part of its workflow and that data can influence decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata