screenshot
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Source: user prompt text is mapped into screenshot parameters (e.g., --app/--window-name/--region/--path) and then executed by scripts/take_screenshot.py at runtime to perform OS/window selection and capture; the workflow does not require preselecting a trusted item before ingesting free-form outsider text.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata