pie-chart-data-analysis

Warn

Audited by Snyk on Jul 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). 该技能在运行时通过 pd.read_excel(file_path, ...) / pd.read_csv(file_path) 读取用户提供的外部文件内容(Excel/CSV 的单元格文本会进入 df 并被用于 LLM 上下文的后续处理/展示),属于“操作用户未选择引入的下载/附件内容”这一类的外部自由文本摄取路径。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 3, 2026, 12:24 PM
Issues
1
Security Audit — snyk — pie-chart-data-analysis