wistia-video-downloader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly says the extension scans and parses third‑party web pages and embedded Wistia players (See "How It Works", "Features", and the step‑by‑step) and fetches renditions from Wistia/embed data on arbitrary public sites, so it ingests untrusted public page content that directly drives download/decision logic.