jipai-perspective
Warn
Audited by Snyk on Apr 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md (Step 2: "必须使用工具（WebSearch等）获取真实信息，不可跳过") and the referenced
references/research/files explicitly require fetching and interpreting open public third‑party sources (e.g., 抖音/Douyin videos, B站, news sites) as part of the agent's research workflow, which exposes it to untrusted/user-generated content that could carry indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata