siyu-qunfa

Warn

Audited by Snyk on Aug 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 在运行时会把“群发文案”(由用户在 skill 输入/对话中提供的自由文本)通过 qunfa_lint.py 从 stdin 读取并交给 LLM 外部扫描逻辑处理,因此存在对外部文本的直接摄取路径。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 10, 2026, 02:02 AM
Issues
1
Security Audit — snyk — siyu-qunfa