ohos-req-review-gate

Warn

Audited by Snyk on Jul 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). ohos-req-review-gate 在运行时直接读取并解析 {docs_dir}/04-feature.mdreference/feature-checklist.md 以及 {docs_dir}/01-requirement.md~{docs_dir}/03-arch-decision-record.md 等文档内容来做判定,且这些文档可由租户用户(外部于本 skill 的产出者)提供,因此属于可被外部作者通过上传/提交 docs_dir 内容注入的自由文本输入路径。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 29, 2026, 08:55 AM
Issues
1
Security Audit — snyk — ohos-req-review-gate