multi-rewrite
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在
scripts/rewrite.py的批量上报流程中,用户/外部输入的“文案内容 content”会被用于生成每个平台的输出并在调用 AI 前被直接作为运行时输入处理,同时脚本也会从输入的 tokens 解析平台并触发规则提取(assets/platform-rules.md),因此存在外部自由文本进入工作流的风险入口。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata