ingest-movie
Warn
Audited by Snyk on Mar 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly runs web searches and scrapers (e.g., ops-nzbgeek/NZBGeek search in SKILL.md and agent_integrations.run_dogpile which queries IMDB, Rotten Tomatoes, Letterboxd, OpenSubtitles, etc.) and the agent workflows (agent.recommend, agent_integrations.run_dogpile, and recommend_movies) consume and act on that untrusted, user-generated third‑party content to make extraction/approval decisions, so it can enable indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata