cnblogs

Warn

Audited by Snyk on Aug 24, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The required runtime workflow (scripts/cnblogs.py) only reads outsider-provided text when the user explicitly supplies it as --content/--content-file for create/update, while CNBlogs-fetched post/category/template data is first-party API response text not authored by an outsider via an injection submission path.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 24, 2026, 05:40 PM
Issues
1
Security Audit — snyk — cnblogs