yichen-video-content
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.72). 该技能的 Phase 1 需要“抓取/提取”对标视频的标题、作者、发布时间、互动数据,且可能需要“视频直链(如需下载转写)”;一旦抓取到的网页内容/转写文本包含他人(非操作用户)撰写的自由文本,就会被读入LLM上下文(典型为公共网页内容或外部视频转写/口播稿)。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata