macro-monitor
Warn
Audited by Snyk on Aug 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). 工作流程会使用 browser 直接访问外部网站/页面(如 Trading Economics 日历、FRED 发布页、国家统计局/央行/证监会/财联社等),并读取其页面上的事件标题、数值与说明等自由文本内容用于整理与推送,因此存在被外部作者投毒后被 LLM 摄取的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata