wecomcli-doc-manage
Warn
Audited by Snyk on Aug 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在《SKILL.md》的“搜索文档”运行路径中,技能会调用
wecom-cli doc search --json并将用户自然语言 query 经过分词后作为keywords等字段形成检索条件,从而把嫌疑的外部自由文本直接以可读文本形式喂给文档搜索流程(而无需先选择具体条目)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata