JD.com Product Details API

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 7:26 AM UTC
• Version: 1.0.0

Overview

This is a focused JD.com product-detail API wrapper, with the main caution that its JustOneAPI token is sent as a query parameter.

Install only if you are comfortable giving the skill a JustOneAPI token for JD.com product-detail lookups. Prefer a narrowly scoped or revocable token, avoid sharing token values in chat or logs, and rotate the token if you suspect request URLs may be captured by infrastructure logs.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

• Location: bin/run.mjs:195

Finding

API Token Transmitted in the URL Query String

Content

View full analysis

parameter.name === "token"); if (!tokenParam || params.token !== undefined) { return; } if (!cliToken) { fail("--token is required for this operation.", { operationId: operation.operationId, }); } params.token = cliToken; } ``` ```js // bin/run.mjs:195-202 function applyQueryParams(operation, params, url) { for (const parameter of operation.parameters.filter((item) => item.location === "query")) { const value = params[parameter.name]; if (value === undefined) { continue; } appendValue(url.searchParams, parameter.name, value); } } ``` The resulting URL is passed directly to the network request: ```js response = await fetch(url, requestInit); ``` ### Technical Analysis The operation manifest declares the access token as a required query parameter. `injectToken()` copies the credential supplied through `--token` into `params.token`, after which `applyQueryParams()` appends it to the request URL. Consequently, requests have the following effective form: ```text https://api.justoneapi.com/api/jd/get-item-detail/v1?token=&itemId= ``` HTTPS encrypts the URL while it is in transit, but it does not prevent the complete URL from being retained by components that process requests. Query strings are commonly recorded by API gateways, reverse proxies, server access logs, observability systems, di ...[truncated 2266 chars]

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · bin/run.mjs (reported line 20)May include surrounding context.

js

"parameters": [
        {
          "defaultValue": null,
          "description": "Access token for this API service.",
          "enumValues": [],
          "location": "query",
          "name": "token",

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · generated/operations.json (reported line 15)May include surrounding context.

json

"parameters": [
        {
          "defaultValue": null,
          "description": "Access token for this API service.",
          "enumValues": [],
          "location": "query",
          "name": "token",

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · generated/operations.md (reported line 19)May include surrounding context.

md

"parameters": [
        {
          "defaultValue": null,
          "description": "Access token for this API service.",
          "enumValues": [],
          "location": "query",
          "name": "token",

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 93% confidence

Finding

The skill invokes a Node helper that performs outbound API calls using a bearer token, but the manifest does not declare an explicit tool scope such as allowed network access or permissions. This weakens least-privilege controls and makes it harder for a host system to constrain or review what external access the skill may perform, especially since all skill content must be treated as potentially adversarial.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The skill sends the API access token as a URL query parameter, which is commonly exposed through logs, browser history, proxy caches, monitoring systems, and error traces. Even though the request uses HTTPS, placing credentials in the URL increases the chance of accidental disclosure outside the TLS channel.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.