buda-video-studio
Warn
Audited by Snyk on Jul 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). Outsider-authored free text from the operating user’s Google Drive is ingested as readable prose via
lib/data-reader/google-drive-api-reader.mjs→downloadFileText()for.md/.srt/.txt/.vttfiles, then included in the generated batch JSON that the UI/agent uses as LLM context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata