wechat-similar-account
Warn
Audited by Snyk on Aug 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). 脚本在运行时仅把用户提供的公众号名称/分类作为请求参数发送给 doubaoya.com 接口,并只读取该接口返回的 JSON 中的结构化字段(如 data.items 的 accountName/avgReadCount/similarity),没有从第三方“任意自由文本源/队列/订阅流”直接摄取外部作者的内容。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata