video-understanding

Warn

Audited by Snyk on Aug 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 在 required 运行路径中,脚本把本地文件 asr_result.json/vlm_analysis.json 里的外显文本(来源于用户提供的视频音频与画面分析)拼入 scripts/agent_brief.py 生成的 agent_narration_brief.md 并交由后续 Agent 写作,因此无需先“选择特定条目”也会摄取来自视频内容的任意自由文本。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 25, 2026, 08:52 AM
Issues
1
Security Audit — snyk — video-understanding