story-short-scan
Warn
Audited by Snyk on Aug 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该技能的必经运行路径会在“browser-cdp 采集模式”下直接抓取外部平台页面内容(如点众
ishugui.com/browse、/book/{id}详情文本;黑岩通过已登录的浏览器从manage.zhangwenpindu.cn/books/booklist/相关 API 拉取简介/标签等),这些平台由第三方作者产生的自由文本会被 LLM 在分析扫榜时读入。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata