target-drug-evidence-evaluation

Warn

Audited by Snyk on Aug 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). 该 skill 在 Step 2-7(如 ls_target_fetch、ls_drug_search、ls_clinical_trial_search、ls_translational_medicine_search 等)会基于用户提供的靶点/适应症参数去检索并读取第三方数据库/文献的文本内容,但工作流中并未显示任何“从外部以任意文本输入并被直接监控读取”的队列/推送/任意网页注入通道。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 27, 2026, 01:26 AM
Issues
1