playlet-wechat-feed

Warn

Audited by Snyk on Aug 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 运行时通过 scripts/fetch_playlet_feed.pydoubaoya.comgongzhonghao-playlet-feed API 发起按关键词扫描并读取返回 JSON(含文章 title/likeCount 等),随后由脚本/下游渲染把这些外部文章元数据作为可读文本喂给 LLM 进行聚类与洞察生成。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 11, 2026, 07:48 PM
Issues
1
Security Audit — snyk — playlet-wechat-feed