wenqu-write
Warn
Audited by Snyk on Aug 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在“Step 2:获取素材(深入阅读)”中会先通过 wenqu-library 的联网搜索/下载把网页原文写入
references/materials/并在后续骨架/审查读取这些内容(尽管按“外部素材安全边界”标注为不可信参考,但仍是运行时摄入的外部自由文本)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata