gitcode-issue-analyzer

Warn

Audited by Snyk on Jun 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). 在运行时通过 GitCode API 获取的 issue 标题/正文/评论(如 fetch_open_issues.pyissue.get('body')fetch_issue_comments.pycomment.get('body'))会被写入本地 Excel 并在后续脚本中以可读文本形式读取(pandas.read_excel),从而进入后续生成的 markdown/LLM上下文;这些文本属于 GitCode 仓库中“非操作用户”作者的自由文本(outsider)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 16, 2026, 05:13 PM
Issues
1
Security Audit — snyk — gitcode-issue-analyzer