video-download
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow ingests only a user-supplied string passed as a "URL" argument to yt-dlp (e.g.,
yt-dlp "URL" --dump-json), and there is no provider-side monitoring of an outsider-authored feed/comment/inbox text without the user selecting the specific URL.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata