openclaw-automation-recipes

Warn

Audited by Snyk on Jun 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). 配方1/4/9/10在运行时会通过 fetch 抓取外部网页内容(如 HN RSS、商品页面)或从社交/品牌提及等外部来源读取文本,再进入 summarize/extract/alert 等LLM上下文,属于“公共网页/社交平台等外部自由文本”经运行时读取的间接提示注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 20, 2026, 02:39 AM
Issues
1
Security Audit — snyk — openclaw-automation-recipes