i-have-an-idea
Warn
Audited by Snyk on Aug 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该 skill 的运行流程通过用户对话/命令来“捕获”用户输入并写入
docs/ideas/IDEA-*.md,而且先从用户表达中提取主题并进行rg检索相关 Markdown(同一运行中 LLM 会直接读取该用户自由文本)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata