eva-preflight

Warn

Audited by Snyk on Aug 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该技能在运行时会直接读取并处理用户提供的待审“自然语言成稿/粘贴稿”正文(含在外部材料安全边界里对其中指令性文本的加载与当作证据处理),属于外部用户自由文本输入会被模型摄入的间接提示注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 21, 2026, 08:53 AM
Issues
1
Security Audit — snyk — eva-preflight