target-drug-evidence-evaluation
Warn
Audited by Snyk on Aug 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). 该 skill 在 Step 2-7(如
ls_target_fetch、ls_drug_search、ls_clinical_trial_search、ls_translational_medicine_search等)会基于用户提供的靶点/适应症参数去检索并读取第三方数据库/文献的文本内容,但工作流中并未显示任何“从外部以任意文本输入并被直接监控读取”的队列/推送/任意网页注入通道。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata