wjs-voicedrop-choosing-cover
Warn
Audited by Snyk on Aug 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在运行流程中读取的 VoiceDrop 文章正文(MCP
read_article)与本地/粘贴内容属于运行时输入文本,而该文本可能包含由外部用户提交的任意文字,从而被用于 Step 1“读全文再判”以及 Step 2/Step 3 的风格与标题提炼。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata