skills/linkfox-ai/linkfox-skills/linkfox-zhihuiya-utility-patent-image-search/Snyk

linkfox-zhihuiya-utility-patent-image-search

Warn

Audited by Snyk on Aug 17, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). SKILL runtime path scripts/zhihuiya_patent_image_search.py sends user-supplied url (image URL) to POST /zhihuiya/patentImageSearch, and the returned data fields (including patent titles/abstract/description and image URLs) are then ingested into the LLM context via the script’s output/serialization.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 17, 2026, 07:05 AM

Issues

1

Security Audit — snyk — linkfox-zhihuiya-utility-patent-image-search