yeelight-cinema-director

Warn

Audited by Snyk on Sep 2, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The skill's required workflow invokes a local Node.js service (via scripts/invoke.sh / scripts/launch.mjs) that accepts and runs search queries against external catalog APIs (IMDb and iTunes) and parses lyrics, but it does not read outsider-authored monitored feeds like email, chat, or external issue trackers.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 2, 2026, 01:28 PM
Issues
1
Security Audit — snyk — yeelight-cinema-director