alicloud-platform-openapi-product-api-discovery
Warn
Audited by Snyk on Mar 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's scripts (notably scripts/products_from_openapi_meta.py and scripts/apis_from_openapi_meta.py, referenced in SKILL.md and references/openapi-meta.md) fetch and parse public JSON from https://api.aliyun.com/meta/v1/products.json and per-product api-docs.json and then use that data to decide further fetches and summaries, so it ingests untrusted third-party web content that can materially influence the tool's actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata