setup-ai-bookkeeping

Warn

Audited by Snyk on Aug 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). Skill 的运行流程在“Feishu HTTP”与“lark-cli 用户授权”模式下会直接对飞书多维表进行读取/连接与字段检查(如校验“流水”表、table_ids.transactions、并运行 setup 的连接与预览写入),因此外部用户在飞书多维表中提交的自由文本可能会被该工作流实际摄取。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 18, 2026, 04:18 PM
Issues
1
Security Audit — snyk — setup-ai-bookkeeping