oled-intelligence-portal
Warn
Audited by Snyk on Aug 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该工作流在 Step 4/Step 5 会直接通过
ls_news_vector_search获取新闻_text/_text_display与url、再通过mcp_patent-search__patsnap_search获取专利摘要等,并将这些可读自由文本嵌入生成的 HTML(generate_portal.py中拼接 title/summary/content/abstract)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata