processon-diagram-generator
Warn
Audited by Snyk on Aug 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In
scripts/processon_api_client.py, the workflow takes the user-providedpromptverbatim, sends it to ProcessOn’s chat completion stream (DSL_STREAM_API_URL = https://smart.processon.com/v1/chat/completion) and then ingests the streamed model output chunks to produce/emit the final DSL and rendering payload, so outsider-authored free text is ingested at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata