weibo-comment-search
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在 Step 2/3,脚本
scripts/weibo_comment_search.py会把用户提供的微博链接/opusId 对应的评论content/nickname等字段(由外部/第三方用户在微博发布)读入并直接用于 AI 情感总结与表格渲染。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata