create-master

Warn

Audited by Snyk on Jul 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 运行时通过 /create-master 的 Step 1–2 从用户输入的“法师名/关注方面/语言偏好”进入生成管线,并调用 FoJin 数据采集与(在离线不足时)进行 FoJin live 检索,且检索/采集返回文本会被拼接进入 LLM 上下文用于生成 teaching.md/voice.md。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 29, 2026, 09:13 PM
Issues
1
Security Audit — snyk — create-master