ai-multimodal

Warn

Audited by Snyk on Apr 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests and analyzes public third‑party content (e.g., references/video-analysis.md shows analyzing YouTube via types.Part.from_uri('https://www.youtube.com/watch?v=VIDEO_ID') and references/vision-understanding.md shows types.Part.from_uri for public images), and those ingested pages/media are read and used to drive transcription/analysis/generation, so untrusted user-generated content can materially influence tool behavior.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 29, 2026, 09:18 AM
Issues
1
Security Audit — snyk — ai-multimodal