gzh-ai-feed

Warn

Audited by Snyk on Aug 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 运行时通过脚本向 doubaoya.com 的接口 POST /api/apis/gongzhonghao/gongzhonghao-ai-feed/call 传入用户抽取的 keyword 获取 JSON data.items,随后会被下游步骤用于生成可点链接表格与聚类日报,因而会读取第三方返回的文章标题/字段内容(可能包含外部作者文本)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 11, 2026, 07:48 PM
Issues
1
Security Audit — snyk — gzh-ai-feed