wechat-hot-article
Warn
Audited by Snyk on Jul 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行时路径为 scripts/hot_article.py：主 Agent 先把用户提供的 keyword/start/end 发起 POST 到 https://doubaoya.com/api/apis/gongzhonghao/hot-article/call 并读取返回 JSON 里的 title 等自由文本供后续排序与解读；该自由文本最终来源于 doubaoya.com 的内容聚合结果（属于外部/可能可被投放的内容）。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata