high-value-patent-package
Warn
Audited by Snyk on Aug 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). Skill runtime path 在
scripts/hv_1_fetch.py通过POST https://connect.zhihuiya.com/search/patent/query-search-patent/v2将用户提供的query_text送入 Patsnap/智慧芽检索接口,从返回结果里读取data.results[].title/ current_assignee/ inventor 等字段并写入 HTML(scripts/hv_7_html_a.py` 对这些字段进行转义后展示)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata