learning-assistant
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在「生成可视化学习看板」路径中，脚本
scripts/learning-assistant/scripts/generate_board.py会读取 KB 目录下的entities/*.md（其中包含概念/计划的自由文本，如“## 概念详解”“## 学习过程整理”等），把这些内容注入到 HTML 的__INJECTED_DATA__/tooltip.html(...)中供前端展示；若实体内容可被外部用户投递/污染，则存在被间接反射为可读文本的风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata