qinyan-topic-analysis
Warn
Audited by Snyk on Jun 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). 该技能在运行时通过
scripts/search.sh调用沁言学术 OpenAPI 的/v1/paper-search/{google|wanfang|pubmed|arxiv}获取检索结果(外部数据库/网页内容的文献元数据与摘要等可读文本),随后用于“文献分析与选题生成”进入LLM上下文,属于公共/第三方来源的自由文本输入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata