ai-local-pois

Warn

Audited by Snyk on Jun 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). 该技能在运行时会接收用户提供的 materialUrl(公开地图/门店/评价/候选页面 URL)并将其对应页面内容作为可读文本用于上下文拼装,从而引入“公共网页内容/外部页面正文(URL 指向的第三方作者文本)”的间接提示注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 13, 2026, 03:31 AM
Issues
1
Security Audit — snyk — ai-local-pois