eva-preflight
Warn
Audited by Snyk on Aug 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该技能在运行时会直接读取并处理用户提供的待审“自然语言成稿/粘贴稿”正文(含在外部材料安全边界里对其中指令性文本的加载与当作证据处理),属于外部用户自由文本输入会被模型摄入的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata