drawio-chart

Warn

Audited by Snyk on Jul 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). SKILL.md 的工作流要求在“多图文章模式”下“读取用户给的一篇文章”并据此提炼结构;该文章正文属于操作用户未必选择引入的外部自由文本输入,运行时会进入 LLM 上下文用于生成图表。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 7, 2026, 04:52 AM
Issues
1
Security Audit — snyk — drawio-chart