ngs-amazon-image-studio

Warn

Audited by Snyk on Aug 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). Skill.md 的运行流程会把用户在“产品业务卡/竞品链接/参考图/联网范例”中提供的内容用于生成提示词,但不包含“从外部来源读取任意用户提交的免费文本、且无需先选择特定条目”的队列/流式文本摄取路径(联网/竞品拆解仅用于提炼规律且目标为特定图片条目);因此该工作流对外部文本间接注入暴露为低。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 14, 2026, 01:34 AM
Issues
1
Security Audit — snyk — ngs-amazon-image-studio