video-perception
Warn
Audited by Snyk on May 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly downloads and processes public YouTube URLs (SKILL.md: "If the user gives a YouTube URL, pass the URL directly as
path" and "the MCP server downloads it withyt-dlp") and requires reading untrusted auto-subtitles/transcriptions and video frames to drive extraction and analysis decisions, so third-party content can directly influence tool use.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata