lov-media-fetch
Warn
Audited by Snyk on Aug 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In
skills/media-discovery/SKILL.mdStep 3 (and optionallyscripts/qbittorrent_search.py), the required workflow performs “direct web or catalog/index queries” and also consumes qBittorrent plugin search results containing free-text fields likefileName,siteUrl,descrLink, and other result metadata, which are outsider-authored.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata