byted-ark-seedance-pe
Warn
Audited by Snyk on Jul 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). 该技能的运行流程要求“仔细阅读用户的原始输入/从请求体中提取文本提示词”,这些文本属于操作用户未选择引入的“用户提供的自由文本”,会被直接进入LLM上下文进行解析与重写,从而存在间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata