product-naming

Warn

Audited by Snyk on Feb 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly directs the agent to perform "竞品命名调研" by "直接搜索" and to "搜索同赛道产品的命名规律" (Step 5a and the "不需要问用户的" list), which entails fetching and interpreting public third‑party content that can materially influence naming decisions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 26, 2026, 02:52 AM