videodb

Warn

Audited by Snyk on Jul 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). In the desktop/RTStream capture workflow, scripts/ws_listener.py connects to VideoDB WebSocket and appends msg.get("data", {}).get("text", "") from real-time transcript/visual_index/audio_index events into videodb_events.jsonl at runtime, where that free text can originate from outsider-authored speech/screen content or other external feed content without any item selection.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 29, 2026, 08:21 AM
Issues
1