recursive-knowledge
Warn
Audited by Snyk on Jul 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). During indexing,
scripts/index_corpus.pyreads each document from a user-supplied--inputdirectory/file, chunks its (potentially outsider-authored) free text, and includes that chunk verbatim in the prompt sent to the LLM viaextract_entities_prompt()/extract_relationships_prompt()→call_llm()(API).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata