byted-volcengine-alert-inspection-analyzer

Warn

Audited by Snyk on Jul 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). SKILL.md:41-60 describes fetching Feishu group messages via feishu_im_user_get_messages, and scripts/alert_inspection.py:322-326 loads that tool-returned JSON and converts outsider-authored content into LLM-readable strings (e.g., normalized[*].content and fields extracted from it) that are then used to generate report.md.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 14, 2026, 06:17 AM
Issues
1
Security Audit — snyk — byted-volcengine-alert-inspection-analyzer