lark-calendar
Warn
Audited by Snyk on Sep 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The skill workflow involves reading existing calendar events (
+agenda,+search-event,+get) and listing attendees (+list-attendees), which may contain user-submitted event summaries, descriptions, or attendee names from the calendar service.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata