lucidchart-core-workflow-b
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In the Lucidchart collaboration workflow, the agent runtime reads outsider-authored free text by listing comment text for a document via
client.documents.comments.list(doc.documentId, ...)and then iteratingc.textfrom the returned items.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata