pm-method-mom-test
Warn
Audited by Snyk on Jul 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). SKILL.md 的“工作流”要求用户提供“访谈记录/已有的访谈记录”,这些内容通常来自非本 Skill 作者的外部当事人(访谈对象)的自由文本,并在步骤 4 被用于“逐条标出哪些是 fluff、哪些是真信号”,从而进入 LLM 上下文进行处理。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata