skills/redfox-data/redfox-community/xiaohongshu-top-account/Snyk

xiaohongshu-top-account

Warn

Audited by Snyk on Jul 30, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). Runtime path scripts/fetch_rank.py: the required workflow accepts outsider-authored --query free text, parses it (period/date/category) and then issues an HTTP POST to https://redfox.hk/story/api/xhsData/query using values derived from that text.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 30, 2026, 02:05 AM

Issues

1

Security Audit — snyk — xiaohongshu-top-account