skills/sanjay3290/ai-skills/gemini-api/Snyk

gemini-api

Warn

Audited by Snyk on Nov 6, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The workflow calls the gemini-api CLI to analyze arbitrary local and remote files (including YouTube URLs), which can expose the model to untrusted external content upon user request.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Nov 6, 2026, 01:48 PM

Issues

1