youtube-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill's SKILL.md explicitly uses yt-dlp to scrape public YouTube content (titles, descriptions, URLs, and potentially transcripts) as part of its required Step 1/Step 2 workflow, meaning it fetches and parses untrusted, user-generated third-party content that can influence which URLs and metadata the agent presents and passes to downstream tools.