fact-check-x-complete
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在 SKILL.md 的“权威证据核验(可选增强)”中,流程在触发
prepare-authority/search-authority后会对可信搜索返回的材料进行理解与裁决读取;可信搜索属于外部页面/证据文本摄取路径,因此存在外部(非一方作者)免费文本进入运行时的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata