pm-market

Warn

Audited by Snyk on Aug 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). SKILL.md 规定在步骤 3.2 中通过 AnySearch/Exa/WebSearch 对用户选择的{行业赛道}/{关键词}进行联网搜索并读取搜索到的页面文本(subagent 执行搜索与提取),因此外部网站作者的免费文本会在运行时被 LLM 摄取用于报告整合。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 3, 2026, 06:20 AM
Issues
1
Security Audit — snyk — pm-market