lx-connector
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and imports user-generated Tencent Meeting recordings via lx meeting commands (see SKILL.md and references/meeting.md such as
lx meeting search-tx-meeting-recordsandlx meeting import-tx-meeting-record) and also surfaces page comments (references/comment.md), so untrusted third‑party content is read and used to decide which records to import and where—potentially influencing subsequent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata