siyu-qunfa
Warn
Audited by Snyk on Aug 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在运行时会把“群发文案”(由用户在 skill 输入/对话中提供的自由文本)通过
qunfa_lint.py从 stdin 读取并交给 LLM 外部扫描逻辑处理,因此存在对外部文本的直接摄取路径。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata