elevenlabs-remotion
Warn
Audited by Snyk on May 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The CLAUDE.md workflow explicitly says the agent will "WebFetch the URL" and extract colors/typography/logo from a user-provided website when no project design file exists, and then synthesize a design.md that the agent MUST apply before generating video compositions—meaning arbitrary public web content is fetched, interpreted, and used to drive generation decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata