drawio-chart
Warn
Audited by Snyk on Jul 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). SKILL.md 的工作流要求在“多图文章模式”下“读取用户给的一篇文章”并据此提炼结构;该文章正文属于操作用户未必选择引入的外部自由文本输入,运行时会进入 LLM 上下文用于生成图表。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata