wecomcli-doc-manage

Warn

Audited by Snyk on Aug 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 在《SKILL.md》的“搜索文档”运行路径中,技能会调用 wecom-cli doc search --json 并将用户自然语言 query 经过分词后作为 keywords 等字段形成检索条件,从而把嫌疑的外部自由文本直接以可读文本形式喂给文档搜索流程(而无需先选择具体条目)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 17, 2026, 03:36 AM
Issues
1
Security Audit — snyk — wecomcli-doc-manage