wecomcli-disk

Warn

Audited by Snyk on Aug 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). 该 skill 在运行时通过 wecom-cli disk files search / wecom-cli disk files list 将用户在输入中的关键词等条件用于搜索并返回的文档/文件元数据(含 doc_url),但不会读取并摄取任何未被显式选定的“外部自由文本内容”;其读取正文仅限依赖文档 skill 且仍基于已命中的在线文档 docid/指定条目。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 18, 2026, 10:32 AM
Issues
1
Security Audit — snyk — wecomcli-disk