game-design-source-curator
Warn
Audited by Snyk on Aug 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该 skill 的运行工作流在进行“候选短读/只深读 shortlist/正式审核”阶段会读取外部来源的正文、字幕、转写或页面正文抽取文本(网页/PDF 等),将其作为不可信数据进行提取与打分,因此存在被外部作者文本(页面内嵌注入指令等)在运行时直接注入的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata