solo-index-youtube

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs downloading and reading YouTube transcripts from public channels using yt-dlp (see "Mode 2" Step 2 and Step 4: "Download transcripts" and "Read each transcript with the Read tool"), so the agent ingests untrusted, user-generated third-party content that could contain instructions influencing its actions.