playlet-wechat-feed
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行时通过
scripts/fetch_playlet_feed.py向doubaoya.com的gongzhonghao-playlet-feedAPI 发起按关键词扫描并读取返回 JSON(含文章title/likeCount等),随后由脚本/下游渲染把这些外部文章元数据作为可读文本喂给 LLM 进行聚类与洞察生成。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata