alibabacloud-livedebug

Warn

Audited by Snyk on Aug 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The runtime path ingests outsider-authored free text via scripts/live-debug/query_task.sh, which builds and sends an SLS --query then prints content results from aliyun sls get-logs-v2 based on those log records (i.e., capture results can contain arbitrary user/outsider text embedded in content).

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 7, 2026, 01:49 AM
Issues
1
Security Audit — snyk — alibabacloud-livedebug