payment-authorization-review
Warn
Audited by Snyk on Jun 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). 该技能在运行时会“从 [OA] 获取付款申请信息”“从 [CASH]/[ERP] 获取账户信息”，其中 OA/附件/付款申请单号对应的付款用途、供应商/合同/发票等字段很可能包含他人（申请人/供应商/业务人员）撰写的自由文本，并被直接拼入 LLM 上下文用于风险判断与报告生成。
MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
- Hidden Unicode characters detected (1 type(s) found)
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W021
MEDIUMHidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
Audit Metadata