xiaohongshu-similar-account
Warn
Audited by Snyk on Jul 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). 运行时会调用
scripts/similar_xhs_account.py向https://doubaoya.com/.../xiaohongshu-similar-account/call发请求并把返回的data.items（含昵称/粉丝数/相似度等可读文本）读入主 Agent 的上下文用于渲染表格；该内容来源于外部服务的接口返回，属于“非操作用户选择引入的外部文本”。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata