skills/wmy2981/skills/gaozhong-english-answer-parser/Snyk

gaozhong-english-answer-parser

Warn

Audited by Snyk on Aug 8, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the runtime “Step 1: Read the file content” explicitly ingests user-supplied PDFs/images (via pdfplumber / pdftoppm + view_image / OCR) and then “Step 2” searches within that ingested text for keywords to extract the answer key.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 8, 2026, 02:07 AM

Issues

1

Security Audit — snyk — gaozhong-english-answer-parser