zach-search-term-report-analyzer
Warn
Audited by Snyk on Aug 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在默认流程中,脚本会对用户选定的 ASIN 进行“live Listing fetch”,通过
fetch_listing_context()抓取 Amazon 前台页面 HTML 并提取 title/bullets/description 等可读文本,然后用于后续词义相关性与分类计算(外部页面文本可能包含由第三方/卖家撰写的注入性内容)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata