rw-research-data
Warn
Audited by Snyk on Jul 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). SKILL.md 的运行流程要求“打开 references/source-map.md 中的官方链接核验并记录日期”(运行时会访问公开网页并把网页正文作为可读证据纳入LLM上下文),属于“公共 web 内容/抓取页面”类别的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata