pangolinfo-amazon-scraper
Warn
Audited by Snyk on Aug 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该 skill 的运行时主要通过 MCP tool 抓取 Amazon 页面结构化数据(如
search_amazon/get_amazon_product/get_amazon_reviews/list_bestsellers)并可在scrape_url模式下接收用户提供的任意 Amazon 搜索 URL/筛选参数进行抓取解析,因此外部用户可提交 free text(keyword/ASIN/url 参数)触发后端读取并进入 LLM 的数据内容处理链。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata