gzh-ai-feed
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行时通过脚本向 doubaoya.com 的接口
POST /api/apis/gongzhonghao/gongzhonghao-ai-feed/call传入用户抽取的keyword获取 JSONdata.items,随后会被下游步骤用于生成可点链接表格与聚类日报,因而会读取第三方返回的文章标题/字段内容(可能包含外部作者文本)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata