feishu-doc-reader
Warn
Audited by Snyk on Jul 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Feishu Document Reader’s required workflow reads outsider-authored Feishu document content at runtime via user-supplied document tokens/URLs (e.g.,
./scripts/read_feishu.sh "https://xxx.feishu.cn/docx/xxxxx"and--wiki-space/--recursive), which the LLM ingests as extracted text blocks.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata