viral-clip-editor
Warn
Audited by Snyk on Jul 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). The required runtime workflow ingests outsider-authored free text from the downloaded video’s spoken transcript:
pipeline.py→transcribe.pyproducesworkdir/transcript.jsonandcut_and_caption.pyreads that JSON (clip_info["words"]) to render captions via ffmpeg drawtext; if the input URL/video is from a third party, that transcript text is outsider-authored.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata