tavern-ui
Warn
Audited by Snyk on Aug 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行时会在消息楼层 iframe 中直接渲染用户聊天内容到
<body>进行 HTML 渲染（HtmlWebpackPlugin产物），因此第三方可通过发布聊天消息/楼层内容注入到被渲染的 free text。
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill instructs fetching and installing remote code (git clone https://github.com/StageDog/tavern_helper_template.git then pnpm install) and instructs loading runtime HTML/JS from the CDN (https://testingcf.jsdelivr.net/gh/{GH_USER}/{GH_REPO}/dist/{ProjectName}/界面/状态栏/index.html and runtime ESM URLs like https://testingcf.jsdelivr.net/npm/{包名}@{版本}/+esm), both of which will execute external code at runtime and are required for operation.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata