yao-geo-panorama-audit
Warn
Audited by Snyk on Jun 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.78). 该 skill 的运行时流程要求“抓取并归档目标品牌官网和官方入口/交叉验证公开信源”,这些抓取到的网页正文属于外部方(非操作用户)在运行时被转成可读文本并进入 LLM 上下文的路径(public web content fetched at runtime)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata