pm/prd-writing
Warn
Audited by Snyk on Jul 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). SKILL.md 在“竞品调研”章节要求运行时使用
WebSearch搜索竞品（外部网页/搜索结果内容会被读取为可读文本并进入下游生成上下文），属于“公共 web 内容在运行时抓取/浏览器提取”的外部来源。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata