wecomcli-disk
Warn
Audited by Snyk on Aug 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在《企业微信微盘》技能中,运行时会通过用户输入的“keywords/creator_userids/search_type/file_types”触发
wecom-cli disk files search获取微盘命中项的title_highlight/text_highlight等高亮摘要片段,并将这些结果供后续展示/总结使用,因而存在外部用户可控自由文本进入检索结果摘要的间接提示注入面。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata