general-testcase
Fail
Audited by Snyk on Jul 29, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). The Feishu URL is a personal/cloud document link that can be used to host arbitrary files (a common vector for malware distribution) and is therefore high-risk; the GitHub commit link is a code reference (not a direct executable download) and is lower risk in this context.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行时会从用户提供的“需求文档”来源读取并进行逐句分析(必要时对飞书/腾讯文档等URL尝试直接读取或用fetch-doc下载),因此外部作者的自由文本会被LLM摄入用于生成测试用例。
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata