ai-audiobook-narration

Warn

Audited by Snyk on Nov 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The workflow reads user-supplied manuscripts, course texts, and uploaded media for audiobook narration and processing on the Beatra service.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill operates a paid hosted service (Beatra) via MCP and API calls that consume prepaid credits (including wallet:spend scope and billable generation tasks). This constitutes a direct financial operation (purchases/charges). Access is controlled via an OAuth device flow that stores an authenticated bearer token in ~/.beatra/credentials.json, fulfilling the independent service authentication requirement.

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 6, 2026, 09:02 AM
Issues
2