u683C\\u6309\\u7167\\u6279\\u9605\\u610F\\u89C1\\u4FEE\\u6539\\u6587\\u6863\\uFF0C\\u9075\\u5FAA\\u4EE5\\u4E0B\\u89C4\\u5219\\uFF1A\n 14 | 1. \\u53EA\\u4FEE\\u6539\\u6709\\u6279\\u9605\\u610F\\u89C1\\u8986\\u76D6\\u7684\\u5185\\u5BB9\\u3002\n 15 | 2. \\u5220\\u9664\\u7EBF (strike: true) \\u8868\\u793A\\u5F3A\\u5220\\u9664/\\u5408\\u5E76\\u610F\\u56FE\\uFF0C\\u7ED3\\u5408\\u4E0A\\u4E0B\\u6587\\u5224\\u65AD\\u3002","networkType":"active-outbound","sendsData":true,"dataDescription":"URL property targets generativelanguage.googleapis.com (https://generativelanguage.googleapis.com/v1beta/models/{{model}}:generateContent)","endpointSource":"hardcoded-url"},{"host":"generativelanguage.googleapis.com","url":"https://generativelanguage.googleapis.com/v1beta/models/{{model}}:generateContent","filePath":"src/api/APIProvider.ts","lineNumber":35,"codeSnippet":" 32 | \t},\n 33 | \tgemini: {\n 34 | \t\tmodel: \"gemini-1.5-pro\",\n> 35 | \t\tendpoint:\n 36 | \t\t\t\"https://generativelanguage.googleapis.com/v1beta/models/{{model}}:generateContent\",\n 37 | \t},\n 38 | \tcustom: {","networkType":"active-outbound","sendsData":true,"dataDescription":"URL property targets generativelanguage.googleapis.com (https://generativelanguage.googleapis.com/v1beta/models/{{model}}:generateContent)","endpointSource":"hardcoded-url"}],"initialDiff":null,"initialDiffFrom":"1.0.5","initialDiffTo":"1.0.6","summary":"The plugin reads a single file from your vault by path, so it can load revision comments from one note. When you use its export or AI-related features, it can send that content to external LLM APIs, including Anthropic, OpenAI, DeepSeek, and Google Gemini. It also makes other network requests, including one destination that could not be identified from the source code.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x

Promptuary