wecomcli-disk
Warn
Audited by Snyk on Aug 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). 该 skill 在运行时通过
wecom-cli disk files search/wecom-cli disk files list将用户在输入中的关键词等条件用于搜索并返回的文档/文件元数据(含doc_url),但不会读取并摄取任何未被显式选定的“外部自由文本内容”;其读取正文仅限依赖文档 skill 且仍基于已命中的在线文档docid/指定条目。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata