article-cover-and-batch-illustration

Warn

Audited by Snyk on Aug 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 运行时会读取用户在该技能中提供的“文章内容”(当前打开文件/指定路径/粘贴文本),并直接用于封面信息提取与配图提示词生成后发送给内置 image_gen/image2 进行图像生成,因此外部用户可通过提交/粘贴文章文本向模型注入任意自由文本。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 11, 2026, 06:43 AM
Issues
1
Security Audit — snyk — article-cover-and-batch-illustration