ngs-amazon-image-studio
Warn
Audited by Snyk on Aug 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). Skill.md 的运行流程会把用户在“产品业务卡/竞品链接/参考图/联网范例”中提供的内容用于生成提示词,但不包含“从外部来源读取任意用户提交的免费文本、且无需先选择特定条目”的队列/流式文本摄取路径(联网/竞品拆解仅用于提炼规律且目标为特定图片条目);因此该工作流对外部文本间接注入暴露为低。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata