youtube-rl-tracker

Warn

Audited by Snyk on Feb 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill's workflow explicitly integrates with "youtube-studio" to upload, update, and track YouTube video performance (views, CTR, retention) — i.e., it ingests public, user-generated YouTube content/metadata that the agent reads and uses to drive decisions about uploads and thumbnails, creating a pathway for indirect instruction via third‑party content.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 20, 2026, 05:14 AM