wecomcli-calendar

Warn

Audited by Snyk on Aug 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 本技能的运行工作流通过读取企业微信日程/会议数据(如 calendar schedules list/search/getmeeting rooms buildings list/rooms search、以及以用户输入为关键词进行搜索)在运行时摄取“由其他用户/组织内容产生的日程主题/地点/名称等文本”,并非仅限一手、可信的第一方文档内容。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 17, 2026, 03:36 AM
Issues
1
Security Audit — snyk — wecomcli-calendar