agent-reach
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在《references/social.md》里，运行时可通过
xhs read NOTE_ID_OR_URL、xhs comments NOTE_ID_OR_URL、以及rdt search/rdt read POST_ID等流程读取由外部作者（他人帖子/笔记/评论）撰写的自由文本，只要攻击者能把内容发布到这些平台并让工作流读取对应 URL/ID。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata