patent-management-system

Warn

Audited by Snyk on Aug 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). Skill 的运行时会调用 patsnap_search/FTO 等工具拉取并处理智慧芽专利与竞企数据(如 Step 1/Step 2),而这些被 LLM 读取的字段来源于外部用户可在 Patsnap 上影响/提交的公开专利文本与实体信息,从而存在间接提示注入暴露面。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 27, 2026, 01:25 AM
Issues
1