trending-hub
Warn
Audited by Snyk on Aug 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Skill runtime path runs scripts/fetch_trends.py which POSTs to https://doubaoya.com/api/apis/trend/trending-hub-keyword/call and directly ingests the provider’s returned hot-trend entries (e.g., title/url) as input for later matching/LLM processing, so outsider-authored text is ingested via the upstream aggregated feed.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata