word-reader

Warn

Audited by Snyk on Jul 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). 该技能在运行时会从操作员提供的 Word 文档文件路径读取文档正文/表格并将提取到的自由文本(docx 段落与表格单元格、doc 经 antiword 输出)拼入 LLM 可读的输出(JSON/Text/Markdown),因此属于“被解析的文档内容来自文件/附件(外部作者)”类别的间接提示注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 23, 2026, 02:04 PM
Issues
1