tech-comparison
Warn
Audited by Snyk on Feb 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). Flagged: the SKILL.md "信息检索与分析" / "数据来源" sections explicitly require retrieving and using public third‑party sources (official docs, GitHub, npm trends, benchmark reports) as part of the required workflow, so untrusted/user‑generated content will be read and can materially influence recommendations.
Audit Metadata