yt-ideation
Fail
Audited by Snyk on Mar 21, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (high risk: 0.90). The prompt includes explicit, out-of-scope operational instructions (accessing the ORM environment, CLI tools, applying configuration changes and producing config/code artifacts) that do not align with the stated YouTube ideation purpose and therefore constitute deceptive/extra instructions.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's Step 4 "Validate Ideas" explicitly instructs sub-agents to assess search demand and competition using public, user-generated sources (YouTube autocomplete, Google Trends, forums, Reddit, existing videos/comments), which the agent must fetch and interpret and which directly drive opportunity scores and follow-up actions.
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata