podcast-producer
Warn
Audited by Snyk on Apr 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's Part 6 "Getting Audio: Download Free Sounds" explicitly instructs the agent to curl/wget audio from public sites (e.g., pixabay.com, freesound.org, mixkit.co), ingesting untrusted/user-generated third‑party content at runtime for use in mixing and production decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata