gingiris-user-interview
Warn
Audited by Snyk on Aug 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Skill 运行流程在用户访谈/测试中会将外部用户在共享屏幕、录音转写与问卷/反馈中提供的自由文本(transcript、feature request、bug 描述、原话引用等)喂给 AI 进行提取并写入 Linear/issue,因此存在旁路的间接提示注入输入面。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata