wenqu-write

Warn

Audited by Snyk on Aug 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 在“Step 2:获取素材(深入阅读)”中会先通过 wenqu-library 的联网搜索/下载把网页原文写入 references/materials/ 并在后续骨架/审查读取这些内容(尽管按“外部素材安全边界”标注为不可信参考,但仍是运行时摄入的外部自由文本)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 5, 2026, 08:31 AM
Issues
1
Security Audit — snyk — wenqu-write