wechat-channels-ai-feed
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行时通过对
doubaoya.com的POST https://doubaoya.com/api/apis/sph/shipinhao-ai-feed/call按用户输入的关键词拉取视频号爆款,随后直接将返回的data.items(其中包含作品title文本)进行渲染/聚类,属于会摄入外部免费文本(视频标题)的工作流。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata