patent-research-analyst

Warn

Audited by Snyk on Aug 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 在“专利检索与分析 Agent”的运行时流程里,外部作者可通过用户输入的【待解决的技术问题】与【初步的技术方案】构造检索式,随后步骤二调用 mcp_patsnap-aggregation-data__search_patents_v3/mcp_patent-search__patsnap_search 读取并处理检索到的专利文本(含标题/摘要/权利要求/说明书全文,字段 TACD_ALL),从而使任意文本在检索与后续分析中进入LLM上下文。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 27, 2026, 01:25 AM
Issues
1