wjs-x-improving-content
Warn
Audited by Snyk on May 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). 该技能运行时把
state/tweets.jsonl(其中包含 X 上“manual”来源的外部作者推文文本text)读入并在scripts/analyze-content.py/scripts/scoreboard.py中作为可读 prose 进行分析与渲染;这些文本属于“非操作用户作者的自由文本(X 公共内容/他人发帖)”。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata