hifi-download

Warn

Audited by Snyk on Oct 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The agent skill queries external music APIs (Spotify, Last.fm, Qobuz, and TIDAL) which return catalog metadata and search results containing outsider-contributed text (such as artist names, track titles, album names, and playlist descriptions).

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 3, 2026, 08:06 AM
Issues
1