tokyomotion-downloader
Warn
Audited by Snyk on Apr 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The extension explicitly requires opening public TokyoMotion video pages and "detects supported playback sources" and "lists the stream variants" (see "How It Works" and "Step-by-Step Tutorial" in SKILL.md), so it ingests untrusted third-party page content (page-exposed media/streams) that the agent uses to decide which quality/URLs to download and thus can influence tool actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata