zach-lingxing-openapi-client
Warn
Audited by Snyk on Jul 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). 该 Skill 的运行流程在本地“同步官方文档到 references/openapi_docs/”(sync_docs.py)时读取的是它解析并缓存的 _sidebar.md 等第一方生成/来源文档内容,而非从外部无选择的用户自由文本入口读取。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata