z-wanghong-handwritten-ppt

Warn

Audited by Snyk on Aug 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该 skill 的运行时(render.sh + prepare_render_html.py + Chrome headless 渲染)会直接读取并渲染用户提供的任意 index.html 文本(包含 aside.notes/逐字稿等),其中每一处可见/可读自由文本都会被浏览器 DOM 摄取用于截图导出。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 7, 2026, 01:09 AM
Issues
1
Security Audit — snyk — z-wanghong-handwritten-ppt