story-import
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). 外部文本只会通过用户在 Phase 1 Step 3/5 提供的“导入书名原文文本/文件路径”进入拆解管道(Phase 2 调用 story-long-analyze/story-short-analyze),而不包含在该运行流程中直接读取第三方公开源/队列/社区内容的通道。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata