handoff-wheel
Warn
Audited by Snyk on Aug 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). WheelMaker 会话交接在运行时通过
scripts/read-session.mjs以用户提供的session-id打开本地~/.wheelmaker/db/client.sqlite3并读取db/session/.../turns/*.bin中的 turn JSON，将其渲染到 transcript（可被包含在后续 LLM 总结的输入中），因此存在 outsider 可通过提交恶意 session 内容影响被读取自由文本的间接注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata