skills/wegoft/exportdou-agent-tools/exportdou/Snyk

exportdou

Warn

Audited by Snyk on Aug 26, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). skills/exportdou/SKILL.md passes the user-supplied Douyin link/share text into the ExportDou CLI (npx exportdou export …) and then the workflow retrieves and reads comment text via npx exportdou preview … and download …, where the preview/download JSON/CSV fields include outsider-authored comment/free text.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 26, 2026, 01:31 PM

Issues

1