goods-images
Warn
Audited by Snyk on Jul 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该 Skill 在运行时直接读取用户在对话中提供的“商品描述”和“用户上传的商品图片”,并将文字用于生成中文卖点/标题等元素、将图片作为 ImagePaths 参与后续渲染与叠加,因此外部可提交的自由文本会被 LLM/渲染流程摄入。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata