crossframe-essay
Warn
Audited by Snyk on Aug 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). CrossFrame Essay 的运行流程会先决定是否联网/查源并用来源台账把“证据与检索”材料纳入底稿与写作边界（例如公共议题/最新事实/真实组织等场景会触发查源），从而可能读取由外部用户/站点作者撰写的文本内容而产生间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata