soia-pkm-clip-github-repo
Warn
Audited by Snyk on Aug 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该技能的运行路径通过
gen_repo_catalog.py在批量模式下扫描本地--upstream目录并读取每个克隆仓库的README内容（以及调研笔记目录下的.md文件）来提取简介并生成项目卡/双向链接，因此外部人员可通过向 GitHub 提供恶意仓库/README 并触发归档把自由文本引入运行时处理流程。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata