smart-search

Warn

Audited by Snyk on Aug 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该技能在运行时会根据用户意图选择站点并在相应搜索页执行抓取/快照提取(如 Reddit:先打开 https://www.reddit.com warmup,再打开 https://www.reddit.com/search/?q={keyword},读取搜索结果页面上的自由文本内容),因此外部用户可通过在社区发布内容来实现间接注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 1, 2026, 06:38 AM
Issues
1
Security Audit — snyk — smart-search