laohan-redian
Warn
Audited by Snyk on Jun 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). 路 3 运行
node douyin-ai.js,该脚本在运行时从抖音公开 API 拉取word_list(含标题/文本字段),这些“非用户选择引入的第三方内容”会被脚本解析并作为可读文本/字段进入后续 LLM 上下文(用于生成热点简报)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata