youtube-script-master

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests public, user-generated YouTube content — e.g., channel_scraper.py "scrapes 35+ channels" and comment_scraper.py "downloads comments from top videos" (outputs: /data/scraped/latest_scrape.json, latest_comments.json), so the agent will read untrusted third‑party content as part of its workflow.