space-video-edit
Warn
Audited by Snyk on Aug 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该技能在运行时通过“带时间词级转录→识别删除候选→生成审核网页→用户确认删哪里→ffmpeg剪出新视频→重新转写→AI校对字幕”的流程会读取由用户提供/产生的口播转写文本(以及生成的review页面内容),属于外部可由用户提交的自由文本输入面。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata