prepaid-schedule
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In
scripts/extract_invoice_fields.pythe required workflow extracts free text directly from user-provided invoice PDFs/images in an input folder (pdfplumberpageextract_text()), then feeds extracted strings like vendor/invoice fields into the schedule/JEs builder.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata