wedding-immortalist
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly ingests and processes untrusted user-generated photos and videos (see "Photo/Video Ingestion" and "Guest Contribution Portal" in SKILL.md, plus "Phone photos: Guest uploads") and then uses that content for theme extraction, face clustering, identity linking, aesthetic scoring, and presentation decisions — meaning third‑party content is read and can materially influence automated decisions and actions.
Audit Metadata