story-short-scan

Warn

Audited by Snyk on Aug 24, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该技能的必经运行路径会在“browser-cdp 采集模式”下直接抓取外部平台页面内容(如点众 ishugui.com/browse/book/{id} 详情文本;黑岩通过已登录的浏览器从 manage.zhangwenpindu.cn/books/booklist/相关 API 拉取简介/标签等),这些平台由第三方作者产生的自由文本会被 LLM 在分析扫榜时读入。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 24, 2026, 03:17 PM
Issues
1
Security Audit — snyk — story-short-scan