pexels-video-downloader
Warn
Audited by Snyk on Apr 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly states the extension will browse and parse public Pexels video pages ("Browse to any video page on the Pexels website", "Input: Pexels-hosted video streams and source files") and will detect video assets and metadata contributed by creators, so the agent ingests untrusted, user-generated third‑party content and uses it to drive actions like detection, resolution choice, filename formatting, and downloads.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata