ohos-req-review-gate
Warn
Audited by Snyk on Jul 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). ohos-req-review-gate 在运行时直接读取并解析
{docs_dir}/04-feature.md、reference/feature-checklist.md以及{docs_dir}/01-requirement.md~{docs_dir}/03-arch-decision-record.md等文档内容来做判定,且这些文档可由租户用户(外部于本 skill 的产出者)提供,因此属于可被外部作者通过上传/提交 docs_dir 内容注入的自由文本输入路径。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata