xiaohongshu-title

Warn

Audited by Snyk on Aug 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 运行时工作流通过向 doubaoya.com 的指定 API 发送 keyword/startDate 拉取返回的 JSON(其中包括 data.items[*].item.title 等),把上游返回文本直接交给主 Agent 做标题拆解与产出。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 18, 2026, 11:44 AM
Issues
1
Security Audit — snyk — xiaohongshu-title