yizhuan

Warn

Audited by Snyk on Mar 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The SKILL.md Step 2 "Discover Content Topics" (Yizhuan Hot Topics Features, competitor analysis, hashtag exploration and UGC repost queue) explicitly describes inspecting trending keywords, popular hashtags, top content and user-generated posts from social platforms, meaning the agent would ingest and act on untrusted public social/web content that could influence decisions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 5, 2026, 11:41 AM