sprout-video-downloader
Warn
Audited by Snyk on Apr 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill's SKILL.md (see "Features", "How It Works", and "Security & Scope") explicitly states the extension scans pages and iframes on third‑party websites to detect and extract SproutVideo embeds/streams (public, user-hosted content) which the agent reads and uses to decide and perform downloads, so untrusted page content can influence its actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata