find-crypto-entry
Warn
Audited by Snyk on Aug 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该技能在运行时通过
list_network_requests({resourceTypes:["xhr","fetch"]})/get_network_request(reqid)/get_request_initiator(requestId)、以及set_breakpoint_on_text({ text: "$ARGUMENTS", urlFilter: "main" })等方式读取浏览器网络请求中的 URL/Header/Body(这些内容可由外部来源/用户触发的请求携带自由文本),从而构成对外部作者自由文本的间接提示注入暴露。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata