zhihu-rewrite
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行时工作流在
rewrite.py的“上报改写记录”步骤通过python scripts/rewrite.py "<文案内容>"接收用户提供的任意文案并将其作为内容参数参与运行流程(尽管此脚本片段只用于上报,但它明确把外部自由文本作为输入处理)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata