transcribe

Warn

Audited by Snyk on May 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly accepts and fetches arbitrary remote media via commands like "voxflow asr --url " (SKILL.md Quick start / Options) and the end-to-end pipelines (video-translate / publish) process those transcripts for translation/dubbing and agent orchestration, so untrusted public URLs or downloaded web videos are ingested and their content can materially influence subsequent agent actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 17, 2026, 11:49 PM
Issues
1
Security Audit — snyk — transcribe