wechat-channels-ai-feed

Warn

Audited by Snyk on Aug 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 运行时通过对 doubaoya.comPOST https://doubaoya.com/api/apis/sph/shipinhao-ai-feed/call 按用户输入的关键词拉取视频号爆款,随后直接将返回的 data.items(其中包含作品 title 文本)进行渲染/聚类,属于会摄入外部免费文本(视频标题)的工作流。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 11, 2026, 07:49 PM
Issues
1
Security Audit — snyk — wechat-channels-ai-feed