arkcli-understand
Warn
Audited by Snyk on Aug 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). 运行时通过用户提供的自由文本 prompt(位置参数
[prompt]或用户输入)直接进入arkcli +understand的 Responsesinstructions/user message,但该文本并非来自外部系统的作者可控内容流(不含邮箱/工单/网页抓取/队列订阅等读取路径)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata