rw-research-data

Warn

Audited by Snyk on Jul 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). SKILL.md 的运行流程要求“打开 references/source-map.md 中的官方链接核验并记录日期”(运行时会访问公开网页并把网页正文作为可读证据纳入LLM上下文),属于“公共 web 内容/抓取页面”类别的间接提示注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 20, 2026, 11:55 PM
Issues
1