cnblogs
Warn
Audited by Snyk on Aug 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required runtime workflow (scripts/cnblogs.py) only reads outsider-provided text when the user explicitly supplies it as --content/--content-file for create/update, while CNBlogs-fetched post/category/template data is first-party API response text not authored by an outsider via an injection submission path.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata