Topic_Planning
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's topic-research step explicitly performs联网搜索/web_fetch and ingests content from open public sources (e.g., 京东、当当、豆瓣、知乎、B站, Google/Baidu, GitHub) including user reviews and community discussions which the agent is expected to read and interpret, creating exposure to untrusted third‑party content.
Audit Metadata