youtube-video-analyst
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's fetch_transcript.py explicitly pulls transcripts from public YouTube videos (and the docs also allow pasting transcripts from YouTube or third-party services like ytscribe.ai), and the agent is designed to read and analyze those user-generated/untrusted transcripts as core input.
Audit Metadata