youtube-video-generation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SSE event documentation (references/SSE-EVENTS.md) explicitly shows the agent issuing web_search_query events and ingesting web_search_citations (arrays of arbitrary URLs) and then producing text responses based on those results, meaning it fetches and interprets untrusted public web content that can influence subsequent actions.