external-tech-acquisition

Warn

Audited by Snyk on Aug 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该技能在“模式A情报扫描模式”和“模式C资产分级模式”会调用智慧芽MCP的 patent.search / paper.search / patent.fetch,并在运行时读取专利与论文数据库中的作者/网页等外部内容文本,因此存在外部(第三方)免费文本间接注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 27, 2026, 01:24 AM
Issues
1