media-studio
Warn
Audited by Snyk on Apr 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly instructs the agent to navigate to and run console scripts on x.com / studio.x.com and to operate on the current tweet/page (e.g., XActions.mediaStudio.listMedia(), XActions.captions.addToCurrentVideo()), which requires scraping and interpreting public, user-generated content from X (tweets/media) that could influence which actions the agent takes.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata