mk-youtube-summarize

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md pipeline explicitly fetches public YouTube content (via /mk-youtube-get-channel-latest, /mk-youtube-get-caption, /mk-youtube-get-audio and related sub-skills) — user-generated, untrusted transcripts/captions are ingested and then read/summarized as part of the workflow (Step 2 → Step 3), so third-party content can influence tool selection and outputs.