patent-research-analyst
Warn
Audited by Snyk on Aug 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在“专利检索与分析 Agent”的运行时流程里,外部作者可通过用户输入的【待解决的技术问题】与【初步的技术方案】构造检索式,随后步骤二调用
mcp_patsnap-aggregation-data__search_patents_v3/mcp_patent-search__patsnap_search读取并处理检索到的专利文本(含标题/摘要/权利要求/说明书全文,字段TACD_ALL),从而使任意文本在检索与后续分析中进入LLM上下文。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata