harmonyos-official-docs
Warn
Audited by Snyk on Jun 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.95). 运行时通过
getDocumentById调用外部文档门户 API 获取value.content(HTML)并用extract_html解析后注入到代理的 LLM 上下文;该正文由第三方网站/文档作者(非操作用户)提供,属于“公共/外部网页内容在运行时被读取为可读文本”。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata