youtube-caption

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and downloads/list captions from YouTube (user-generated public content) as shown in references/caption-download.md and references/caption-list.md, so the agent would ingest arbitrary third-party caption text from the open web that could influence subsequent actions.