create-master
Warn
Audited by Snyk on Jul 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行时通过
/create-master的 Step 1–2 从用户输入的“法师名/关注方面/语言偏好”进入生成管线,并调用 FoJin 数据采集与(在离线不足时)进行 FoJin live 检索,且检索/采集返回文本会被拼接进入 LLM 上下文用于生成 teaching.md/voice.md。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata