survivorship-universe-auditor
Warn
Audited by Snyk on Aug 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Skill 在运行时只读取由用户/调用方提供的 UTF-8 CSV(
--input <csv>),并把其中自由文本字段(如 symbol/date/return/delisting_return)直接进入scripts/audit_universe.py的解析与审计逻辑;未显示从队列/聊天/工单等外部自由文本源被动摄取。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata