bilibili-keywords-search
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 源于用户在 Step 1 提供的关键词会被传入脚本
scripts/search_bili_realtime.py,脚本再通过https://redfox.hk/story/api/bili/search读取外部内容(视频标题/作者等)并在 Step 3 直接渲染给用户。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata