pangolinfo-amazon-scraper

Warn

Audited by Snyk on Aug 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该 skill 的运行时主要通过 MCP tool 抓取 Amazon 页面结构化数据(如 search_amazon/get_amazon_product/get_amazon_reviews/list_bestsellers)并可在 scrape_url 模式下接收用户提供的任意 Amazon 搜索 URL/筛选参数进行抓取解析,因此外部用户可提交 free text(keyword/ASIN/url 参数)触发后端读取并进入 LLM 的数据内容处理链。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 10, 2026, 06:29 AM
Issues
1