youtube-thumbnail

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly tells the agent to search YouTube for "outlier" videos and download their public thumbnails (e.g., https://img.youtube.com/vi//sddefault.jpg) and to search/download company logos from the web using curl, so it fetches and reads untrusted, user-generated public web content as part of its workflow.