taleb-perspective
Fail
Audited by Snyk on Aug 27, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (medium risk: 0.30). The skill explicitly instructs the agent to impersonate Nassim Nicholas Taleb and adopt his authoritative voice (e.g., "我是谁:我是Nassim Nicholas Taleb" and "此Skill激活后,直接以塔勒布的身份回应"), which is fabricated authority/deceptive steering without clear malicious intent.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md规定在Step 1/2需“WebSearch等工具获取真实信息”,并用搜索到的“主流观点/反面观点/历史类比/市场叙事/持仓披露”等作为Step 2事实输入,因此外部用户可通过诱导被搜索检索到的来源内容间接向运行时注入自由文本。
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata