high-value-patent-package

Warn

Audited by Snyk on Aug 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). Skill runtime path 在 scripts/hv_1_fetch.py 通过 POST https://connect.zhihuiya.com/search/patent/query-search-patent/v2 将用户提供的 query_text 送入 Patsnap/智慧芽检索接口,从返回结果里读取 data.results[].title/ current_assignee/ inventor 等字段并写入 HTML(scripts/hv_7_html_a.py` 对这些字段进行转义后展示)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 27, 2026, 01:24 AM
Issues
1