weather-search
Warn
Audited by Snyk on Aug 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). TO_AGENT 在
scripts/run.py生成的analyze_grid_artifact上下文中读取job_dir/.esflow/analyze_grid/artifact.json的llm_text/llm_json(由scripts/nodes/analyze_grid.py基于外部网络数据与--query生成),并未从任何队列/公告/邮箱/票据等“外部用户可直接投递文本”源中直接选取任意自由文本。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata