dingtalk-minutes
Warn
Audited by Snyk on Jul 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). 该 skill 的运行时会通过
dws minutes get transcription/get summary/get todos等命令把“听记内容/待办/摘要/逐字稿”等来自他人会议记录（outsider-authored content）的自由文本返回给脚本/LLM 并进入上下文（间接提示注入风险）；同时 SKILL.md 也明确要求从 URL/列表拉取真实听记数据并基于其生成输出。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata