videodb

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The codebase includes explicit desktop/screen+audio capture, real-time transcription/visual indexing (including examples detecting password fields and app names), persistent recording/storage options, and webhook/callback mechanisms — features that can be (and are explicitly shown to be) used to exfiltrate sensitive data and harvest credentials.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). reference/capture-reference.md + scripts/ws_listener.py read and persist WebSocket event text fields (e.g., msg["data"]["text"] from transcript/visual_index/audio_index) into videodb_events.jsonl at runtime.