vivadicta-transcribe-flow
Warn
Audited by Snyk on Apr 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly accepts and transcribes public HTTP/HTTPS (YouTube) URLs (see "Input auto-routes" and examples in SKILL.md) so the agent fetches and ingests untrusted, user-generated audio/captions from the open web which can meaningfully influence subsequent actions like rewrites or summaries.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata