workflow-acquisition-archive

Warn

Audited by Snyk on Jun 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). Step 1 “Web video (1000+ sites)” via media-ytdlp ingests outsider-authored free text (e.g., video description/subtitles/thumbnail metadata) fetched at runtime from public web pages, which can be passed into the agent/LLM context.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 27, 2026, 09:55 AM
Issues
1
Security Audit — snyk — workflow-acquisition-archive