gracker-diagrams
Warn
Audited by Snyk on Aug 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该 Skill 的运行流程把用户/外部输入的原始文本写入
source.md,再经由analysis.md、structured-content.md和copy.md生成可见文案并最终进入prompts/infographic.md,属于对外部自由文本的直接运行时摄取路径。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata