alibabacloud-agentloop-evaluation
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The runtime workflow
scripts/analyze_evaluation_results.pyqueries the SLSevaluation_detailLogstore (aliyun sls get-logs-v2 --query ...) and then parses/normalizes fields likeexplanation,evaluation_process, and (optionally) raweval_info/custom_outputs, which originate as free text from evaluation runs; an outsider could influence the stored log content via evaluation inputs/outputs.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata