cultural-tourism-wechat-feed

Warn

Audited by Snyk on Aug 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 运行时流程在脚本 scripts/fetch_culture_feed.py 中把用户输入的 keyword 发到 doubaoya.com 的 feed 接口并读取返回的 data.items(公众号文章标题等内容),其中可能包含公众号作者的自由文本;随后工作流把这些字段渲染成可点链接表格并进行聚类总结。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 11, 2026, 07:48 PM
Issues
1
Security Audit — snyk — cultural-tourism-wechat-feed