eva-review
Warn
Audited by Snyk on Aug 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Skill“eva-review”在运行时会读取用户提供的已发布内容数据/截图、以及用户指定的 Excel/CSV/Markdown 表格或记录文件夹来进行单篇复盘、批量回溯与结果回填，这些输入可由外部作者在内容本身或文件中注入任意自然语言从而被 LLM 直接摄取。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata