douyin-hot-trend

Warn

Audited by Snyk on Jul 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). Required workflow calls scripts/fetch_hot_trend.py, which fetches runtime JSON from https://doubaoya.com/... and prints data (including outsider-authored title/url) to stdout; the agent then ingests that stdout into the LLM context as readable text.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 9, 2026, 09:41 AM
Issues
1
Security Audit — snyk — douyin-hot-trend