douyin-weekly-surge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). 运行时通过 scripts/fetch_weekly_surge.py 调用 https://doubaoya.com/.../douyin-content-surge/call 获取的 data.items[*].item.title/category/share_url（外部网站返回的文本）会被拼入后续“铺周榜 + 给中线洞察”的 LLM 上下文，属于公共/第三方运行时内容注入风险。