article-cover-and-batch-illustration
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行时会读取用户在该技能中提供的“文章内容”(当前打开文件/指定路径/粘贴文本),并直接用于封面信息提取与配图提示词生成后发送给内置 image_gen/image2 进行图像生成,因此外部用户可通过提交/粘贴文章文本向模型注入任意自由文本。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata