hmos-arkui-develop-skill
Warn
Audited by Snyk on Aug 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在 Step 2.3“调用知识检索”中,LLM 会基于用户需求解析出的待检索清单调用
hmos-arkui-knowledge-retriever并读取检索返回的知识库文本(虽未说明检索源是否可能被第三方注入,但运行时会摄入外部可变文本结果)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata