enterprise-clone-builder
Warn
Audited by Snyk on Jul 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). 该 skill 的运行时流程包含“联网补充调研”(Step 1)使用 web-clipper 抓取任意官网/第三方平台网页并将抓取结果(正文 Markdown)写入
02-原始素材/,随后 Step 2/3 会从“全部素材(本地 + 联网)”进行结构化提取与文风分析,从而把 OUTSIDER(公开网页内容)作者的自由文本读入同一个 LLM 上下文。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata