loan-risk-monitor
Warn
Audited by Snyk on Jun 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.78). 步骤2/3/6在运行时会对“企业全称”进行网络搜索并读取外部网页/商业平台/媒体的正文内容(如企查查/天眼查网页、财经媒体文章),这些均属于OUTSIDER-AUTHORED的公开网页自由文本进入LLM上下文的路径。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata