yt-competitive-analysis

Warn

Audited by Snyk on Apr 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). This skill calls the public YouTube Data API v3 (see analyze.py's api_get calls to https://www.googleapis.com/youtube/v3/ and the SKILL.md/README describing pulling recent videos) and directly ingests user-generated video metadata (titles, view/like/comment counts) to detect outliers and extract title patterns, so untrusted third-party content can materially influence its analysis and outputs.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 5, 2026, 07:42 AM
Issues
1