ai-intelligence-investigator

Warn

Audited by Snyk on Aug 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 本地版“情报调查员”在工作流程的“广域扫描/深度挖掘/交叉验证”中会对用户自然语言调查目标执行多引擎公开网页/社区(如 site:reddit.com、WeChat/Toutiao 等)搜索并读取对应搜索结果与页面文本,从而让外部(非平台方/非本地作者)的自由文本在运行时被LLM摄入用于报告生成。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 11, 2026, 07:48 PM
Issues
1
Security Audit — snyk — ai-intelligence-investigator