pie-chart-data-analysis
Warn
Audited by Snyk on Jul 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). 该技能在运行时通过
pd.read_excel(file_path, ...)/pd.read_csv(file_path)读取用户提供的外部文件内容(Excel/CSV 的单元格文本会进入df并被用于 LLM 上下文的后续处理/展示),属于“操作用户未选择引入的下载/附件内容”这一类的外部自由文本摄取路径。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata