ai-content-creator
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). 该技能在运行时会接收用户提供的
materialUrl(公开可访问的文章/页面/竞品链接),并在“contextComposer”模式下把其内容作为可读文本拼入 LLM 上下文,从而引入外部网页/第三方自由文本的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata