doubaoya
Warn
Audited by Snyk on Aug 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). doubaoya Skill 在运行时会调用
POST /api/apis/tool/parse-content-detail/call（解析“粘贴一个公开链接”的内容）并把该外部网页/作品文本读入后再用于归一化与后续合规检查，因而对“外部公开链接内容”存在间接提示注入暴露面。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata