srt-remotion-video-papercraft
Warn
Audited by Snyk on Aug 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该工作流在运行态会读取用户提供的
srtPath(即 SRT 里的任意文本),并在Storyboard Parser中把字幕text写入storyboard.json的segments[].text供后续 LLM/渲染阶段消费,从而存在外部作者可通过提交 SRT 注入自由文本的间接提示注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata