YouTubeSearch
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's SKILL.md and scripts/yt-search.sh explicitly run yt-dlp "ytsearch…" against YouTube (public, user-generated content) and the agent is instructed to read and analyze those results (e.g., using engagement ratio and view counts) to drive recommendations, so untrusted third-party content can influence actions.
Audit Metadata