weitoutiao-creator

Warn

Audited by Snyk on Jul 30, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该技能在第2步“素材获取”中允许用户选择“路径一:热点事件/主题查询”并“联网查询相关信息和背景/分析热点的时效性和切入点”,因此外部用户提交的热点关键词会进入运行时检索与抓取生成过程,存在间接提示注入暴露风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 30, 2026, 05:57 PM
Issues
1
Security Audit — snyk — weitoutiao-creator