jordan-peterson-perspective
Warn
Audited by Snyk on Jun 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). 该Skill的运行时工作流会通过
scripts/download_subtitles.sh/yt-dlp从用户提供的 YouTube URL 下载字幕并转成可读文本进入LLM上下文；字幕内容属于第三方（YouTube/视频作者/自动字幕系统）产出的自由文本，因此属于“公共网页/第三方内容在运行时被读取为可读文本”的外部来源路径。
MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
- Hidden Unicode characters detected (1 type(s) found)
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W021
MEDIUMHidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
Audit Metadata