bmz-lyrics-check
Warn
Audited by Snyk on Aug 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在《bmz-lyrics-check：歌词质检》的“第一步：联网查重、歌词溯源与版权风险识别”流程中，该模块会对用户提供的歌词片段进行多轮联网搜索（Google/Baidu/YouTube Music/音乐平台等），从而在运行时实际摄入外部网页/搜索结果文本；由于外部内容可被盲投毒且触发时机由歌词文本驱动，存在间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata