story-import

Warn

Audited by Snyk on Jul 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). 该 skill 的运行时会读取“用户提供的原文/贴入文本”(Phase 1 Step 1-4 → Phase 2 调用 story-long-analyze/story-short-analyze,并将原文/拆解产物以可读 prose 形式写入 拆文库/{书名}/,再在 Phase 3 迁移与后续写作上下文中使用),因此可能包含外部方(非操作用户)作者的免费文本并被喂入 LLM。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 26, 2026, 10:43 PM
Issues
1
Security Audit — snyk — story-import