yichen-video-content

Warn

Audited by Snyk on Jun 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.72). 该技能的 Phase 1 需要“抓取/提取”对标视频的标题、作者、发布时间、互动数据,且可能需要“视频直链(如需下载转写)”;一旦抓取到的网页内容/转写文本包含他人(非操作用户)撰写的自由文本,就会被读入LLM上下文(典型为公共网页内容或外部视频转写/口播稿)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 13, 2026, 03:17 AM
Issues
1
Security Audit — snyk — yichen-video-content