sleeping-patent-asset-activation
Warn
Audited by Snyk on Aug 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 工作流在“补公开市场信号”与“补专利详情链接”步骤中会检索公开 Web 来源并通过 MCP(
patsap_patent_search/global_core_patent_database)读取候选证据与详情页面内容,但并未说明如何将“用户/外部作者可投递的自由文本”限定为可信来源、也没有先选择特定条目后再读取;因此存在外部作者文本被间接摄入的中等风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata