youtube-instant-article

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly ingests arbitrary public YouTube content provided by the user (see SKILL.md and scripts/generate.sh where summarize "$URL" is called to extract title/transcript/timestamps), parses that output to drive image placement and article construction, and publishes the results—so untrusted, user-generated video/transcript content can materially influence tool use and next actions.