speech-pathology-ai

Warn

Audited by Snyk on Mar 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill's reference code (e.g., references/ai-models.md and references/mellifluo-platform.md) calls transformers.from_pretrained and Wav2Vec2Processor.from_pretrained (e.g., "facebook/wav2vec2-xls-r-300m" and "vitouphy/…") to fetch public Hugging Face models and then uses those model outputs to drive scoring, feedback, and next-practice decisions, so untrusted third‑party content can materially influence agent behavior.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 5, 2026, 08:37 PM