dwf-requirement
Warn
Audited by Snyk on Jul 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). 该技能在运行时会读取用户提供的外部文档链接（如网页/飞书）或本地文件路径并把其“文件内容/抓取内容”整理进需求文档生成流程，进而作为可读中文文本进入 LLM 上下文；若这些内容来自非用户选择引入的第三方（外部链接/他人文档/下载文件），则属于 OUTSIDER-AUTHORED FREE TEXT 的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata