sleeping-patent-asset-activation

Warn

Audited by Snyk on Aug 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 工作流在“补公开市场信号”与“补专利详情链接”步骤中会检索公开 Web 来源并通过 MCP(patsap_patent_search / global_core_patent_database)读取候选证据与详情页面内容,但并未说明如何将“用户/外部作者可投递的自由文本”限定为可信来源、也没有先选择特定条目后再读取;因此存在外部作者文本被间接摄入的中等风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 27, 2026, 01:25 AM
Issues
1