weitoutiao-creator
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该技能在第2步“素材获取”中允许用户选择“路径一:热点事件/主题查询”并“联网查询相关信息和背景/分析热点的时效性和切入点”,因此外部用户提交的热点关键词会进入运行时检索与抓取生成过程,存在间接提示注入暴露风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata