youtube-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly runs hosted public-content collection and discovery (see collectPublicContent in internal/public-content/scripts/lib/public_content_common.mjs and the SKILL.md entries for the youtube-comments / youtube-channel-summary collection keys), which scrapes public YouTube posts and audience comments (untrusted, user-generated content) and then normalizes and uses that content as part of its workflow and decision-making.