aihot
Warn
Audited by Snyk on Aug 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该技能在运行时会把来自
https://aihot.virxact.com的/api/public/items、/api/public/daily等返回字段（如title/summary/leadParagraph/sections）直接纳入生成输出，而这些文本本质上可包含第三方/外部作者的内容，且技能不需要先挑选特定条目即可持续读取一批公开聚合内容。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata