video-fetch-and-summarize
Warn
Audited by Snyk on Sep 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow reads video URLs from user-provided files or arguments and downloads videos from arbitrary platforms (e.g., YouTube, Reddit), which can contain untrusted free text processed by the Gemini API.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata