digital-health-clinical-asr-setup

Warn

Audited by Snyk on Jun 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). At runtime, the required smoke-test in Step 1c calls NVIDIA NVCF (grpc.nvcf.nvidia.com) with user-provided clinical sentence text and the synthesized WAV audio bytes, which are then transcribed and included in the returned transcript that the agent can place into its LLM context.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 18, 2026, 04:34 PM
Issues
1
Security Audit — snyk — digital-health-clinical-asr-setup