ai-intelligence-investigator
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 本地版“情报调查员”在工作流程的“广域扫描/深度挖掘/交叉验证”中会对用户自然语言调查目标执行多引擎公开网页/社区(如 site:reddit.com、WeChat/Toutiao 等)搜索并读取对应搜索结果与页面文本,从而让外部(非平台方/非本地作者)的自由文本在运行时被LLM摄入用于报告生成。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata