pre-visit-credit-analysis
Warn
Audited by Snyk on Jun 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). 舆情扫描步骤3会对“企业名称+违规/欺诈/跑路/资金链/债务危机/实际控制人失联”等关键词执行Web搜索(百炼Web搜索/通用搜索引擎),从而把公开网页/搜索结果中的自由文本内容读入并用于生成“访前一页纸”,属于OUTSIDER来源的运行时自由文本注入风险路径。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata