range-reading-and-large-file-analysis

Warn

Audited by Snyk on Jul 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). 该子技能在运行时通过 pd.read_excel(file_path, sheet_name=target_sheet) / pd.read_excel(file_path) 读取用户提供的 Excel 文件内容(外部文档正文),并将其解析为可读文本/数据进入后续统计与可视化步骤,从而可能把“非用户自有”的自由文本/单元格内容喂入LLM上下文。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 3, 2026, 12:24 PM
Issues
1
Security Audit — snyk — range-reading-and-large-file-analysis