story-import
Warn
Audited by Snyk on Jul 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). 该 skill 的运行时会读取“用户提供的原文/贴入文本”(Phase 1 Step 1-4 → Phase 2 调用 story-long-analyze/story-short-analyze,并将原文/拆解产物以可读 prose 形式写入
拆文库/{书名}/,再在 Phase 3 迁移与后续写作上下文中使用),因此可能包含外部方(非操作用户)作者的免费文本并被喂入 LLM。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata