oled-intelligence-portal

Warn

Audited by Snyk on Aug 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该工作流在 Step 4/Step 5 会直接通过 ls_news_vector_search 获取新闻 _text/_text_display 与 url、再通过 mcp_patent-search__patsnap_search 获取专利摘要等,并将这些可读自由文本嵌入生成的 HTML(generate_portal.py 中拼接 title/summary/content/abstract)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 27, 2026, 01:24 AM
Issues
1