mab-fto-check

Warn

Audited by Snyk on Aug 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该 skill 会在步骤1.5(M1.5-A~E)对外部/用户提供的氨基酸突变描述与分子信息进行检索式构造,并调用 Patsnap MCP(patsnap_search)及 ls_structure_search 去读取/返回专利数据库中的文本(如权利要求原文与独立权利要求);因此存在从 outsider 提交的自由文本影响到受体读取专利文本的间接提示注入暴露路径。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 27, 2026, 01:24 AM
Issues
1