multi-rewrite

Warn

Audited by Snyk on Aug 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 在 scripts/rewrite.py 的批量上报流程中,用户/外部输入的“文案内容 content”会被用于生成每个平台的输出并在调用 AI 前被直接作为运行时输入处理,同时脚本也会从输入的 tokens 解析平台并触发规则提取(assets/platform-rules.md),因此存在外部自由文本进入工作流的风险入口。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 15, 2026, 09:46 AM
Issues
1
Security Audit — snyk — multi-rewrite