book-distiller
Warn
Audited by Snyk on Jul 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The required runtime path is:
scripts/parse_book.pyextracts readable text from a user-supplied book file (.pdfvia PyMuPDF page text,.epubvia ebooklib + BeautifulSoupget_text()), and that extracted free-form prose is then fed into the distillation prompts—so if the book is authored by someone other than the operating user, it is outsider-authored content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata