yichen-content-archive
Warn
Audited by Snyk on Aug 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). 《逸尘内容归档》在“入口闸门/固化范围”之外仍允许用户提供的 x.com/twitter.com/网页 URL,运行时会通过 scripts/x_known_url.py 与 Jina Reader(jina-reader)读取并解析返回的自由文本/Markdown(并将其放入 content/jina_markdown 等字段)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata