videodb

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The package and docs enable persistent desktop capture (screen/microphone/system audio), real-time visual/text detection (including examples to detect password fields and Slack content), and delivery of alerts/webhooks (callback_url) and generated stream URLs — features that can be directly abused to steal credentials or exfiltrate sensitive recordings if misused.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). reference/capture-reference.md describes a WebSocket listener (scripts/ws_listener.py) that ingests outsider-authored free text from live transcript/visual/audio events (msg["data"]["text"]) without selecting a specific item first.