general-testcase

Fail

Audited by Snyk on Jul 29, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). The Feishu URL is a personal/cloud document link that can be used to host arbitrary files (a common vector for malware distribution) and is therefore high-risk; the GitHub commit link is a code reference (not a direct executable download) and is lower risk in this context.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 运行时会从用户提供的“需求文档”来源读取并进行逐句分析(必要时对飞书/腾讯文档等URL尝试直接读取或用fetch-doc下载),因此外部作者的自由文本会被LLM摄入用于生成测试用例。

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 29, 2026, 10:05 AM
Issues
2
Security Audit — snyk — general-testcase