mcp-vods
Warn
Audited by Snyk on Feb 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). Yes — SKILL.md explicitly states the vods_search tool "需要在多个源站搜索" (searches multiple source sites) and the workflow (vods_search → mitv_play_media/tvbox_play_media) shows the agent fetches and acts on untrusted public web sources to obtain/play URLs, which could allow third-party content to influence actions.
Audit Metadata