video-format-conversion

Warn

Audited by Snyk on Feb 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md examples explicitly accept external video URLs via the "image_urls" field (e.g., "https://example.com/source-video.mov") and the SSE-EVENTS.md documents web_search_query/web_search_citations events, indicating the agent fetches and consumes arbitrary public web content and search results as part of its workflow, which could allow untrusted third-party content to influence actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 20, 2026, 07:58 AM