cc-draw
Warn
Audited by Snyk on Jun 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). RUNTIME 會把使用者在專案/CLI 輸入的
prompt（外部使用者文字）直接傳入client.images.generate(prompt=args.prompt)，屬於非操作用戶所選擇引入的自由文本注入面（使用者輸入本身即為外部來源）。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata