wechat-similar-account

Warn

Audited by Snyk on Aug 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). 脚本在运行时仅把用户提供的公众号名称/分类作为请求参数发送给 doubaoya.com 接口,并只读取该接口返回的 JSON 中的结构化字段(如 data.items 的 accountName/avgReadCount/similarity),没有从第三方“任意自由文本源/队列/订阅流”直接摄取外部作者的内容。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 18, 2026, 11:43 AM
Issues
1
Security Audit — snyk — wechat-similar-account