wecomcli-disk

Warn

Audited by Snyk on Aug 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 在《企业微信微盘》技能中,运行时会通过用户输入的“keywords/creator_userids/search_type/file_types”触发 wecom-cli disk files search 获取微盘命中项的 title_highlight / text_highlight 等高亮摘要片段,并将这些结果供后续展示/总结使用,因而存在外部用户可控自由文本进入检索结果摘要的间接提示注入面。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 17, 2026, 03:36 AM
Issues
1
Security Audit — snyk — wecomcli-disk