gitcode-issue-analyzer
Warn
Audited by Snyk on Jun 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). 在运行时通过 GitCode API 获取的 issue 标题/正文/评论(如
fetch_open_issues.py的issue.get('body')、fetch_issue_comments.py的comment.get('body'))会被写入本地 Excel 并在后续脚本中以可读文本形式读取(pandas.read_excel),从而进入后续生成的 markdown/LLM上下文;这些文本属于 GitCode 仓库中“非操作用户”作者的自由文本(outsider)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata