download-bilibili-video
Warn
Audited by Snyk on Jun 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). The skill fetches outsider-authored free text from public Bilibili/b23.tv pages at runtime via
resolve_short_url()(HTTP GET to b23.tv and following theLocationheader) and then passes the resolved URL toyt-dlp, which ingests page/metadata text from those public sites into the LLM context indirectly (e.g., via--print/info-json/description outputs).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata