autocad-automation
Warn
Audited by Snyk on Aug 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 运行时会通过
scripts/acad_draw.py读取由外部用户/代理提供的 JSON brief(包含entities[].text等自由文本)并将其中text写入 AutoCAD 图纸(session.add_text/add_mtext),因此存在被注入的可读自由文本入口。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata