cultural-tourism-xiaohongshu-feed
Warn
Audited by Snyk on Jul 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). 工作流第2步调用
scripts/fetch_culture_feed.py在运行时向doubaoya.com发起请求并读取其返回的data.items(其中来自小红书公开笔记的标题等文本),这些属于“公共网页/平台内容在运行时被获取并转为可读文本进入上下文”的外部来源。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata