video-understanding
Warn
Audited by Snyk on Aug 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在 required 运行路径中,脚本把本地文件
asr_result.json/vlm_analysis.json里的外显文本(来源于用户提供的视频音频与画面分析)拼入scripts/agent_brief.py生成的agent_narration_brief.md并交由后续 Agent 写作,因此无需先“选择特定条目”也会摄取来自视频内容的任意自由文本。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata