video-downloader
Warn
Audited by Snyk on Jul 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). Runtime path: the skill calls
https://doubaoya.com/api/skills/video-downloader/invokewith a user-supplied share URL, then parses the JSON response and printsenvelope.data(e.g.,title,cover,videoUrl) into the agent’s LLM context; this content is derived from outsider-authored public web media metadata fetched by the external service.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata