post-optimizer

Warn

Audited by Snyk on May 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's Step 1b "热点扫描与深入研究" explicitly requires using search tools to fetch and analyze open web sources (e.g., 官⽅网站/文档, GitHub, 用户评价, 社区讨论, 社交媒体 and other public webpages) and to integrate those user-generated and third‑party findings into the rewrite workflow, which clearly exposes the agent to untrusted external content that can influence decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 5, 2026, 05:09 PM
Issues
1