eliteforge-makefile-spec

Warn

Audited by Snyk on Jul 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). 该技能在运行时会执行 scripts/inspect_repository.py 读取仓库内的多种文本文件(如 package.json/pom.xml/pyproject.toml/CI 工作流等)并把其内容(解析后的字段与证据字符串)作为 JSON 结果喂给后续 LLM 上下文;这些文本属于“操作用户未选择引入的仓库外部作者内容”,存在间接提示注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 16, 2026, 08:46 AM
Issues
1
Security Audit — snyk — eliteforge-makefile-spec