pm-market
Warn
Audited by Snyk on Aug 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md 规定在步骤 3.2 中通过 AnySearch/Exa/WebSearch 对用户选择的{行业赛道}/{关键词}进行联网搜索并读取搜索到的页面文本(subagent 执行搜索与提取),因此外部网站作者的免费文本会在运行时被 LLM 摄取用于报告整合。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata