handdrawn-article-illustrator
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在
scripts/generate_prompts.py与scripts/batch_article_images.py的必经流程中,用户提供的文章材料/outline(如assets/outline_sample.json中的concept_en、chapter_claim_en、final_prompt_en等字段)会被脚本直接拼接进prompt,并在--mode codex生成的codex_generation_queue.md/.json中把该自由文本 prompt 交给 Agent 的内置图片生成能力使用。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata