mab-fto-check
Warn
Audited by Snyk on Aug 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该 skill 会在步骤1.5(M1.5-A~E)对外部/用户提供的氨基酸突变描述与分子信息进行检索式构造,并调用 Patsnap MCP(patsnap_search)及
ls_structure_search去读取/返回专利数据库中的文本(如权利要求原文与独立权利要求);因此存在从 outsider 提交的自由文本影响到受体读取专利文本的间接提示注入暴露路径。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata