commercial-brief
Warn
Audited by Snyk on Aug 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该 skill 在“Brief 分析/素材整合/风格对齐”阶段直接接收并读取用户提供的 commercial brief、参考文章与测试素材内容来生成文章大纲与全文,因此存在被用户(外部作者)提交的自由文本触发的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata