skills/yixiajack/dating-master-skill/dating-master/Snyk

dating-master

Warn

Audited by Snyk on Apr 9, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.90). The SKILL.md and SKILL.en.md explicitly instruct users to paste chat logs from iMessage/WhatsApp/Tinder/Instagram DMs and other user-generated conversations for analysis, so the agent ingests untrusted third-party user-generated content as part of its runtime workflow (SKILL.md "输入格式"/SKILL.en.md "Input Format").

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Apr 9, 2026, 10:02 AM

Issues

1