nmem-maintenance

Warn

Audited by Snyk on Jul 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). 该技能运行时会通过 nmem feed/nmem memories show 拉取并处理来自知识库(由系统/他人生成的事件与记忆正文)的文本,再在 Step 4 进行对比与汇总后呈现给用户;若这些“事件/记忆内容”被注入到代理的 LLM 上下文(用于分类与报告),则属于“外部来源的自由文本经由运行时工具输出进入 LLM 上下文”的间接提示注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 21, 2026, 11:32 AM
Issues
1
Security Audit — snyk — nmem-maintenance