space-video-broll-sketch

Warn

Audited by Snyk on Aug 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 源码 SKILL.md 的运行链路会把分镜表口播/画面描述等“用户提供的原文内容”直接拼进 --prompt,并在 scripts/seedance.py / scripts/libtv_i2v.sh 中作为文本发送给视频模型生成动效,因此存在外部作者文本进入运行时 LLM 提示的间接注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 5, 2026, 08:28 AM
Issues
1
Security Audit — snyk — space-video-broll-sketch