taxue-industry
Warn
Audited by Snyk on Aug 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md 的 L1/L2/L3 工作流在运行时会通过
web_search与web_fetch搜索并“读取关键页面”的外部网页/页面自由文本，从而存在被外部作者投毒内容影响的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata