douyin-ai-feed
Warn
Audited by Snyk on Jul 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). 运行时会调用外部端点
https://doubaoya.com/api/apis/douyin/douyin-ai-feed/call，并将返回的data.items[]（含title等自由文本）作为 JSON 打到标准输出，随后被技能/代理读入LLM上下文；该自由文本来自外部服务（非操作用户）。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata