video-understanding

Warn

Audited by Snyk on Jul 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). 该技能在运行时会对用户提供的外部视频链接(如 YouTube/Bilibili 等)进行 web_fetch/第三方 API 调用以读取其标题/描述/字幕等文本,这些内容属于“公共网页/第三方平台页面或其 API 返回的非用户自有文本”,从而可能把外部作者的自由文本注入到 LLM 上下文。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 6, 2026, 12:52 PM
Issues
1