calendar-api
Warn
Audited by Snyk on Aug 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). scripts/getzdday.py 构造请求读取外部 API（https://cn.apihz.cn/api/time/getzdday.php）返回的字段字符串并直接拼接输出，因此第三方可在其 API 返回内容中夹带“指令式”自由文本被 LLM/agent 运行时消费。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata