drawio-diagram
Warn
Audited by Snyk on May 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill's style-migration mode explicitly requires fetching a user-provided reference image via a URL at runtime ("参考图：必选。用户上传的图片，或提供图片路径/链接"), so an arbitrary external image URL supplied by the user (user-provided image URL) would be fetched and directly used to control the agent's generation instructions and style decisions.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata