zhihu-rewrite

Warn

Audited by Snyk on Aug 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 运行时工作流在 rewrite.py 的“上报改写记录”步骤通过 python scripts/rewrite.py "<文案内容>" 接收用户提供的任意文案并将其作为内容参数参与运行流程(尽管此脚本片段只用于上报,但它明确把外部自由文本作为输入处理)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 15, 2026, 07:40 AM
Issues
1
Security Audit — snyk — zhihu-rewrite