image-skill-builder

Warn

Audited by Snyk on Aug 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该技能在运行时会读取用户在 Phase 1-3 中通过交互问答提供的自由文本(如故事/主题/文章内容或“参考图片”配套描述),并把这些文本作为 prompt 传入 scripts/generate_image.py 调用 Gemini 的 generateContent 接口生成图像。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 21, 2026, 02:09 AM
Issues
1