gitcode-repo-daily
Warn
Audited by Snyk on Aug 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在运行时通过
generate_daily_report.py的fetch_one_repo()对 GitCode API 的 PR/Issue/评论title/body等字段进行拉取与拼入报告 JSON(并在_render_report()与模板替换中渲染到 Markdown),因此外部用户可在其仓库的 PR/Issue 内容中投放注入文本并被该流程读取。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata