lark-im
Warn
Audited by Snyk on May 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's required workflows (e.g., SKILL.md and references/lark-im-messages-search.md and lark-im-chat-messages-list.md) explicitly fetch and render user-generated chat messages and threads from Feishu (untrusted third-party content) and instruct the agent to read, summarize, and act on those messages (e.g., report generation, follow-up commands), which enables indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata