weibo-comment-search

Warn

Audited by Snyk on Aug 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 在 Step 2/3,脚本 scripts/weibo_comment_search.py 会把用户提供的微博链接/opusId 对应的评论 content/nickname 等字段(由外部/第三方用户在微博发布)读入并直接用于 AI 情感总结与表格渲染。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 15, 2026, 09:46 AM
Issues
1
Security Audit — snyk — weibo-comment-search