elevenlabs-dubbing

Warn

Audited by Snyk on May 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly accepts and processes arbitrary public audio/video URLs (e.g., the Quick Start and Workflow show inputs like "audio": "https://original-video.mp4" and subsequent steps run dubbing and STT on that content), so untrusted third‑party/user-provided media are fetched and analyzed and could indirectly inject instructions that alter processing decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 19, 2026, 07:48 AM
Issues
1
Security Audit — snyk — elevenlabs-dubbing