podcast-transcript-fetcher
Warn
Audited by Snyk on Jul 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The required runtime workflow fetches outsider-authored transcript text from public podcast RSS/episode pages (e.g., Tier 2 downloads MP3 from RSS and then sends the resulting transcription text into the agent’s analysis step, and Tier 1 website/substack/PDF scraping downloads arbitrary HTML/PDF text from third-party sites).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata