juejin-auto-checkin
Warn
Audited by Snyk on Mar 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill uses Playwright to load and scrape public juejin.cn pages (see scripts/juejin_auto.py and scripts/debug_page.py where page.goto("https://juejin.cn/...") and page.evaluate/document.body.innerText or page.content are used) and directly interprets that untrusted third‑party page content to decide clicks and follow‑up actions (sign-in/lottery), which could enable indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata