alibabacloud-waf-report
Warn
Audited by Snyk on Aug 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In the required “online collection” workflow, the agent performs SLS log queries via
aliyun sls get-logs(using user-supplied region/project/logstore/time window) and ingests the resultingrequest_path,querystring,request_body, user agents, and related fields from Alibaba Cloud SLS traffic logs at runtime, which can contain attacker-originated free-text payloads (indirect prompt injection risk).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata