minimax-h3
Warn
Audited by Snyk on Aug 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a local ComfyUI workflow where the only runtime free text ingested is the user-written prompt block fields (e.g., integrated_multimodal_description/overall_soundscape/non_diegetic_music) that the H3 nodes consume as a plain multiline string, so outsider-authored free text can be directly posted into the workflow without selecting a specific trusted item.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata