youtube-downloader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill invokes yt-dlp on arbitrary YouTube URLs (see get_video_info calling yt-dlp --dump-json and the download command in scripts/download_video.py), therefore it fetches and parses untrusted, user-generated content from the public web (YouTube) as part of its workflow.