word-reader
Warn
Audited by Snyk on Jul 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). 该技能在运行时会从操作员提供的 Word 文档文件路径读取文档正文/表格并将提取到的自由文本(docx 段落与表格单元格、doc 经 antiword 输出)拼入 LLM 可读的输出(JSON/Text/Markdown),因此属于“被解析的文档内容来自文件/附件(外部作者)”类别的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata