cultural-tourism-wechat-feed
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行时流程在脚本
scripts/fetch_culture_feed.py中把用户输入的keyword发到doubaoya.com的 feed 接口并读取返回的data.items(公众号文章标题等内容),其中可能包含公众号作者的自由文本;随后工作流把这些字段渲染成可点链接表格并进行聚类总结。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata