xiaohongshu-account-analyzer
Warn
Audited by Snyk on Aug 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该 Skill 在运行时会把用户提供的“小红书号”用于调用
POST https://redfox.hk/story/api/xhsUser/query获取账号简介/作品标题等文本字段，并在后续步骤中将这些（及相似账号数据）直接用于报告生成与HTML填充。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata