astock-social-feed

Warn

Audited by Snyk on Jul 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.95). 运行时会向 doubaoya.com 的公开聚合接口发起搜索请求,并把返回的 xhsResult/dyResult/gzhResult 中的作品标题/作者/发布时间等“社媒文本”直接作为 JSON stdout 进入后续 LLM 上下文;这些内容来自小红书/抖音/公众号等非操作用户的外部作者(outsider)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 1, 2026, 05:47 PM
Issues
1
Security Audit — snyk — astock-social-feed