space-text-logic-diagram
Warn
Audited by Snyk on Aug 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该技能在“文本分析/概念抽象”步骤中对用户在对话中粘贴的文章/段落/论述进行通读并将其作为节点与关系的输入文本生成 HTML+SVG,因此会直接把外部用户自由文本喂给运行时 LLM(无须先选择特定来源项)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata