xiaoqi-board
Warn
Audited by Snyk on Aug 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该 Skill 的运行时会直接读取“用户说的口述/散乱思考或逻辑大纲”等用户输入文本并生成看板内容(用于生成 HTML 的占位内容替换),因此存在被用户提交的自由文本影响生成结果的风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata