audio-visualization

Warn

Audited by Snyk on Feb 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md requires submitting arbitrary audio URLs via the "audio_urls" parameter (e.g., "audio_urls": ["https://example.com/track.mp3"]) and the included references/SSE-EVENTS.md documents web_search_query and web_search_citations events, showing the agent fetches and ingests public web resources and search results that can materially influence model/tool behavior.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 20, 2026, 07:56 AM