openqq
Warn
Audited by Snyk on Aug 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In qq-bot.js, the runtime reads outsider-authored QQ message free text from incoming WebSocket events (event.d.content) in handleMessage() and immediately passes it to OpenClaw via sendToOpenClawAndWait() using spawn('openclaw', ['agent','--session-id',..., '--message', ...]).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata