enterprise-clone-builder

Warn

Audited by Snyk on Jul 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). 该 skill 的运行时流程包含“联网补充调研”(Step 1)使用 web-clipper 抓取任意官网/第三方平台网页并将抓取结果(正文 Markdown)写入 02-原始素材/,随后 Step 2/3 会从“全部素材(本地 + 联网)”进行结构化提取与文风分析,从而把 OUTSIDER(公开网页内容)作者的自由文本读入同一个 LLM 上下文。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 23, 2026, 05:12 AM
Issues
1
Security Audit — snyk — enterprise-clone-builder