youtube-comment

Warn

Audited by Snyk on Aug 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 运行时工作流通过用户提供的 YouTube videoId/链接调用 scripts/youtube_comment_search.py 的红狐 API,并把返回的 comments[].content 直接喂给后续四维情感分析与对话输出(外部作者=YouTube评论作者的自由文本)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 15, 2026, 09:46 AM
Issues
1
Security Audit — snyk — youtube-comment