infographic-generator
Warn
Audited by Snyk on Mar 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's prompt_template.txt workflow explicitly requires "步骤 2:深度搜索" to "搜索该领域的核心概念 / 收集具体品牌名、数值、百分比 / 寻找典型案例和对比数据", which instructs the agent to fetch and ingest open/public third-party content (brands, numbers, cases) that will be used to build the infographic and thus can influence subsequent outputs and actions.
Audit Metadata