yichen-content-archive

Warn

Audited by Snyk on Aug 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). 《逸尘内容归档》在“入口闸门/固化范围”之外仍允许用户提供的 x.com/twitter.com/网页 URL,运行时会通过 scripts/x_known_url.py 与 Jina Reader(jina-reader)读取并解析返回的自由文本/Markdown(并将其放入 content/jina_markdown 等字段)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 3, 2026, 07:28 AM
Issues
1
Security Audit — snyk — yichen-content-archive