kuaishou-search
Warn
Audited by Snyk on Aug 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 用户输入的关键词会被传给脚本
scripts/search_ks_work.py,经由运行时 POST 到https://redfox.hk/story/api/ksAllData/searchWork并读取返回的作品标题/作者等字段后直接在结果表格中渲染(属于外部/非第一方作者文本的运行时摄取)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata