wecomcli-calendar
Warn
Audited by Snyk on Aug 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 本技能的运行工作流通过读取企业微信日程/会议数据(如
calendar schedules list/search/get、meeting rooms buildings list/rooms search、以及以用户输入为关键词进行搜索)在运行时摄取“由其他用户/组织内容产生的日程主题/地点/名称等文本”,并非仅限一手、可信的第一方文档内容。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata