yao-geo-panorama-audit

Warn

Audited by Snyk on Jun 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.78). 该 skill 的运行时流程要求“抓取并归档目标品牌官网和官方入口/交叉验证公开信源”,这些抓取到的网页正文属于外部方(非操作用户)在运行时被转成可读文本并进入 LLM 上下文的路径(public web content fetched at runtime)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 15, 2026, 10:56 AM
Issues
1
Security Audit — snyk — yao-geo-panorama-audit