patent-family-analyzer

Warn

Audited by Snyk on Aug 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该技能在 Step 1/2 通过 patent.fetch 获取同族专利清单与逐件技术要素(问题/手段/效果/权利要求结构要点),并未要求先选取“特定外部条目”才能让 LLM 读取专利文本,因此外部用户只要提交专利号/专利URL即可触发对由第三方作者(专利文本作者)撰写的自由文本的读取与分析。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 27, 2026, 01:25 AM
Issues
1