legal-document-analyzer
Warn
Audited by Snyk on Jul 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The required workflow parses the user-supplied contract file (PDF/DOCX/text) and extracts its readable text (
LegalDocumentParser._parse_pdf/_parse_docx/_parse_text→full_text), which is outsider-authored free text if the operating user did not author the document.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata