define-workflow-refine
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在 SKILL.md 的 External Scan Protocol 中,工作流会在运行时执行 External Scan(WebSearch/browser/文档检索),从外部搜索结果读取并据以形成 Fact/Pattern/Inference 等可被后续阶段采纳的内容。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata