video-voiceover

Warn

Audited by Snyk on Jul 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). scripts/voiceover.py 运行时会读取用户提供的 work_dir/narration.json(命令行 --narration 或默认 work_dir/narration.json),将其中每段 narration 文本直接送入 MiMo TTS(_tts_mimo / _run_tts_engine)作为指令化 free text。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 29, 2026, 06:21 PM
Issues
1
Security Audit — snyk — video-voiceover