wecomcli-email

Warn

Audited by Snyk on Aug 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该技能的运行流程在“读取邮件详情/附件”时会通过 wecom-cli mail get 获取邮件正文 content 或从 file_path 读取正文 Markdown,并将该正文作为 LLM 可读输入进行摘要/展示(属于外部邮件作者可控的自由文本)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 18, 2026, 10:33 AM
Issues
1
Security Audit — snyk — wecomcli-email