podcast-generator
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's workflow explicitly instructs the agent to "find/download CC-licensed ambient techno" from public sites (see SKILL.md "Open Source Music Sources" and step 3), requiring it to fetch and interpret content from open, user-contributed websites like Free Music Archive/Pixabay/Wikimedia, which can materially influence asset selection and downstream actions.
Audit Metadata