hmos-arkui-develop-skill

Warn

Audited by Snyk on Aug 2, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 在 Step 2.3“调用知识检索”中,LLM 会基于用户需求解析出的待检索清单调用 hmos-arkui-knowledge-retriever 并读取检索返回的知识库文本(虽未说明检索源是否可能被第三方注入,但运行时会摄入外部可变文本结果)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 2, 2026, 05:43 PM
Issues
1
Security Audit — snyk — hmos-arkui-develop-skill