animations
Warn
Audited by Snyk on May 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's workflow (Phase 7.5 in SKILL.md) requires invoking the companion "screen-recorder" with a provided url/selector and then feeding the resulting recording to "video-analyser" (Phase 7.6), which means the agent will load and interpret arbitrary user-supplied web pages/URLs as part of its processing—exposing it to untrusted third-party content that could carry indirect prompt-injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata