soia-pkm-interpret

Warn

Audited by Snyk on Jul 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). SKILL.md要求在运行时定位并“读文章的 ## 原文 段/clip 家族正文结构”来生成解读;该 ## 原文 来自用户 vault 中被 clip 进来的外部长文/论文(outsider-authored内容),其可读文本会进入 LLM 上下文用于生成五段式解读。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 14, 2026, 03:44 PM
Issues
1
Security Audit — snyk — soia-pkm-interpret