compliance-verification

Warn

Audited by Snyk on Aug 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 此技能在「步驟一:資料載入與範疇定性」要求使用者貼上合約草案原文,並在「步驟二:法規對照與合規性分析」對該文字進行分析與引用對照,屬於直接接收外部(使用者)自由文本的運行時輸入路徑。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 5, 2026, 11:14 PM
Issues
1
Security Audit — snyk — compliance-verification