image-skill-builder
Warn
Audited by Snyk on Aug 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该技能在运行时会读取用户在 Phase 1-3 中通过交互问答提供的自由文本(如故事/主题/文章内容或“参考图片”配套描述),并把这些文本作为 prompt 传入 scripts/generate_image.py 调用 Gemini 的 generateContent 接口生成图像。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata