content-parse
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行路径为
scripts/parse_content.py接收用户提供的“公开作品/文章链接”作为参数url，并在POST https://doubaoya.com/api/apis/tool/parse-content-detail/call请求中把该外部URL交给上游解析；因此上游可能读取并回传该URL对应的外部（第三方作者/站点）免费文本内容到data并由本技能打印给LLM/调用方。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata