weather-search

Warn

Audited by Snyk on Aug 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). TO_AGENT 在 scripts/run.py 生成的 analyze_grid_artifact 上下文中读取 job_dir/.esflow/analyze_grid/artifact.jsonllm_text/llm_json(由 scripts/nodes/analyze_grid.py 基于外部网络数据与 --query 生成),并未从任何队列/公告/邮箱/票据等“外部用户可直接投递文本”源中直接选取任意自由文本。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 7, 2026, 03:12 PM
Issues
1
Security Audit — snyk — weather-search