extend-fun
Warn
Audited by Snyk on Jul 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). SKILL.md 的“获取缓存/读取内容”流程会在运行时读取
references/.cache/extend-fun/（或回退到~/.cache/jeesite/extend-fun/）中的__00.md/__01.md等文档文本；这些缓存内容来源于运行时脚本cache_docs.py（可能从外部/公共文档抓取），属于“公共 web 内容/下载的文档正文被读入 LLM 上下文”的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata