gingiris-user-interview

Warn

Audited by Snyk on Aug 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). Skill 运行流程在用户访谈/测试中会将外部用户在共享屏幕、录音转写与问卷/反馈中提供的自由文本(transcript、feature request、bug 描述、原话引用等)喂给 AI 进行提取并写入 Linear/issue,因此存在旁路的间接提示注入输入面。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 14, 2026, 07:11 AM
Issues
1
Security Audit — snyk — gingiris-user-interview