douyin-search
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行路径是用户输入关键词后由
scripts/search_douyin.py向doubaoya.com发起POST /api/apis/douyin/search-work/call并直接读取返回的data.items字段（其中可能包含作品标题/达人名/错误消息等文本）来渲染表格与后续“选题洞察”，因此会摄入由外部内容作者（抖音/聚合结果）产生的免费文本。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata