compliance-verification
Warn
Audited by Snyk on Aug 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 此技能在「步驟一:資料載入與範疇定性」要求使用者貼上合約草案原文,並在「步驟二:法規對照與合規性分析」對該文字進行分析與引用對照,屬於直接接收外部(使用者)自由文本的運行時輸入路徑。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata