alicloud-platform-openapi-product-api-discovery

Warn

Audited by Snyk on Mar 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's scripts (notably scripts/products_from_openapi_meta.py and scripts/apis_from_openapi_meta.py, referenced in SKILL.md and references/openapi-meta.md) fetch and parse public JSON from https://api.aliyun.com/meta/v1/products.json and per-product api-docs.json and then use that data to decide further fetches and summaries, so it ingests untrusted third-party web content that can materially influence the tool's actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 11, 2026, 10:15 AM
Issues
1