yt-ideation

Fail

Audited by Snyk on Mar 21, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.90). The prompt includes explicit, out-of-scope operational instructions (accessing the ORM environment, CLI tools, applying configuration changes and producing config/code artifacts) that do not align with the stated YouTube ideation purpose and therefore constitute deceptive/extra instructions.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill's Step 4 "Validate Ideas" explicitly instructs sub-agents to assess search demand and competition using public, user-generated sources (YouTube autocomplete, Google Trends, forums, Reddit, existing videos/comments), which the agent must fetch and interpret and which directly drive opportunity scores and follow-up actions.

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 21, 2026, 11:28 PM
Issues
2