mj-download
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The download.ts script explicitly opens and scrapes the public Midjourney Organize page at https://www.midjourney.com/organize using Playwright, locates page elements (e.g., "Today", "Select all", "Download") and acts on them, which means it ingests and uses untrusted third‑party web content at runtime to drive actions.
Audit Metadata