interview-cracker
Warn
Audited by Snyk on Jun 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). 该技能在 Step 1/4 会“搜索该岗位最新JD和面经”“搜索{岗位名} 薪资…”,从而把公开网页/第三方面经等外部免费文本抓取后读入LLM上下文;因此存在外部来源的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata