bilibili-keywords-accounts

Warn

Audited by Snyk on Jul 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). 运行时会调用外部接口 https://redfox.hk/story/api/bili/userSearch,将其返回的用户昵称/简介等“自由文本”(如 nicknamedescription)进入代理的 LLM 上下文用于分类与表格渲染,因此存在来自外部方的自由文本注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 3, 2026, 02:06 AM
Issues
1
Security Audit — snyk — bilibili-keywords-accounts