z-wanghong-handwritten-ppt
Warn
Audited by Snyk on Aug 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该 skill 的运行时(render.sh + prepare_render_html.py + Chrome headless 渲染)会直接读取并渲染用户提供的任意 index.html 文本(包含 aside.notes/逐字稿等),其中每一处可见/可读自由文本都会被浏览器 DOM 摄取用于截图导出。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata