supsub-focus
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). 该 skill 的运行时数据摄取路径仅通过用户选择的
supsub focus contents --id <focusId>拉取服务端汇总的关注点内容（含标题/摘要等），其中字段来自 MP/WEBSITE/X 的内容流但不体现为“外部用户可直接注入并被先于选择即读取的队列/提要”；文本在运行时是按已选择 focusId 获取的。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata