short-drama-produce
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). 生产运行路径
scripts/production_tool.py run_job -> _run_adapter -> scripts/provider_adapters.py直接把 job 中的prompt/parameters/lyrics(由外部用户文本间接形成的创作者确认内容)作为 provider 请求体字段发送给供应商,但该文本仅在 creator-first job 且经prepare/confirm闸门锁定后才被 LLM/模型读取,且不进行任意外部文本抓取或无选择投喂。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata