pharma-intelligence-brief

Warn

Audited by Snyk on Aug 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 在“重要新闻”模块中,工作流会调用 mcp_zhihuiya-172627__bio_search_news 和(兜底)mcp_pharma_intelligence__ls_news_vector_search 读取新闻结果的标题/内容/来源文本并写入 data["news"],从而让第三方新闻文本进入后续 scripts/generate_report.py 的 HTML 渲染链路。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 27, 2026, 01:25 AM
Issues
1