company-tech-profile-zhcn

Warn

Audited by Snyk on Aug 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该技能在“路由规则/降级策略”中允许在结构化专利/论文检索不可用时使用 Exa/Tavily/Brave/web/Jina 进行广域公开网络发现与页面/PDF 阅读,从而在运行时读取第三方网页正文等可被外部作者投毒的自由文本。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 27, 2026, 01:22 AM
Issues
1