lark-vc
Warn
Audited by Snyk on Aug 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在 vc 这条必需运行路径中，LLM会基于用户提供的自然语言用
vc +search/vc +detail获取会议与纪要的内容，并进一步通过note +detail与docs +fetch读取文档正文；其中--query等文本会直接进入POST /open-apis/vc/v1/meetings/search的搜索输入，形成对“外部用户可控自由文本”的运行时摄入。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata