title-research

Warn

Audited by Snyk on Aug 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). In scripts/research.py, Step 1 builds a YouTube results URL from the user’s free-text query and then uses firecrawl scrape + firecrawl interact/firecrawl search to ingest rendered search-result titles/channels/views (outsider-authored YouTube content) into the LLM via the interact prompt.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 18, 2026, 02:47 PM
Issues
1
Security Audit — snyk — title-research