sn-search-market-cn

Warn

Audited by Snyk on Jul 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). 该技能的运行时工作流会调用 scripts/free_market_api.pycninfo-announcements 接口(巨潮资讯公告查询接口),其返回的 data.announcements[]/pdfUrl 以及公告标题等字段会被作为可读文本/链接进入后续处理与LLM上下文;该内容属于第三方网站(巨潮资讯)公开公告文本/元数据,属于“公共网页/第三方站点内容”来源。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 1, 2026, 10:40 PM
Issues
1
Security Audit — snyk — sn-search-market-cn