douyin-account-diagnosis

Warn

Audited by Snyk on Jun 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). 运行时会调用红狐API POST https://redfox.hk/story/api/dyUser/query 获取账号/作品字段(如 works.title/desc、signature 等)并将其作为可读文本拼入LLM输出报告;这些文本来自第三方服务而非操作用户,因此属于“公共/第三方运行时获取内容”导致的间接提示注入暴露。

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

  • Hidden Unicode characters detected (1 type(s) found)

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W021
MEDIUM

Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 12, 2026, 07:50 PM
Issues
2
Security Audit — snyk — douyin-account-diagnosis