create-moment
Warn
Audited by Snyk on Jul 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). The required workflow calls Montage MCP tools like
get_transcript(project_id)and then passes the returned transcript text (outsider-authored video transcription content) intocreate_momentasutterances[].text, which the agent’s LLM context can ingest as free-form text during step 2/4.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata