patent-avoidance-design
Warn
Audited by Snyk on Aug 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该技能在运行时通过用户提供的专利PDF/专利号触发子流程(阶段I调用 patent-claim-to-funcmodel)读取并分析“专利原文 vs 还原对比表”所依赖的专利文本,因此存在把外部/用户提交的自由文本(专利内容)直接喂给LLM的运行路径。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata