wps-ocr
Warn
Audited by Snyk on Aug 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In this skill’s runtime, the agent ingests user-supplied file content (via
python3 skills/wps-ocr/scripts/wps_ocr.py --path <LOCAL-PATH>or--url <URL>), base64-encodes/validates it, sends it to the Kingsoft WPS OCR API, and then returns the extractedmarkdown_text—so it is not merely a first-party doc lookup but direct processing of outsider-provided content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata