pharma-project-initiation-report
Warn
Audited by Snyk on Aug 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). SKILL.md 规定运行时需要先“数据检索和补查”(包括 Web 补查)并从 Patsnap/Life Sciences 工具与 Web 来源填充报告,但未给出具体运行时会读取哪类外部、由第三方提交的自由文本输入(例如邮箱/社交/工单正文),因此无法确认存在可被外部作者直接投毒的“被动摄取”路径。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata