videodb-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow (upload/search/edit/capture and AI subtitle/transcription via the VideoDB Python SDK) depends on user-provided video URLs/files, meaning outsider-authored free text (e.g., the user’s natural-language instructions and any extracted/recognized speech content) is ingested at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The setup instructions run npx (npx skills add video-db/skills) and pip install which fetch and execute remote packages, and the skill points to the code repository https://github.com/video-db/skills which indicates a runtime external code execution dependency.