arkcli-understand

Warn

Audited by Snyk on Aug 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). 运行时通过用户提供的自由文本 prompt(位置参数 [prompt] 或用户输入)直接进入 arkcli +understand 的 Responses instructions/user message,但该文本并非来自外部系统的作者可控内容流(不含邮箱/工单/网页抓取/队列订阅等读取路径)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 10, 2026, 04:12 PM
Issues
1
Security Audit — snyk — arkcli-understand