design-workflow-design

Warn

Audited by Snyk on Aug 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). design-workflow-design 的 Step 3(Design Best-Practice Scan)会从项目内 references/design-best-practices.md / references/design-inspiration-catalog.md / references/design-pattern-extract.md 读取分层设计资料,并且仅在“Web search 兜底”时才可能涉及外部文本,但该外部文本并未在当前必需流程中被明确为可由 outsider 直接投递/强制触达的免费文本输入源。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 26, 2026, 06:47 AM
Issues
1
Security Audit — snyk — design-workflow-design