feishu-cli-visual

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 飞书画板路径 C（references/workflows/board/workflow.md -> 调用 references/workflows/board/scripts/svg_to_board.py）在运行时会把用户/外部提供的 SVG 文件内容交给 whiteboard-cli 转换为节点 JSON，再上传到画板，因此外部文本（SVG 里的自由文本）会被 LLM 读取/处理（通过本地解析与转换链）。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill embeds HTML that, at runtime in the document iframe, loads and executes remote JavaScript (e.g. ECharts/Three.js via https://cdn.jsdelivr.net/npm/echarts@5/dist/echarts.min.js and related cdn.jsdelivr.net URLs such as the echarts map JSON), so these CDN URLs are runtime-executed external dependencies.