youtube-catchup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and parses public YouTube content (see scripts/youtube_helper.py: get_transcript / get_video_metadata and the subagent prompt that runs "python3 scripts/youtube_helper.py full {video_id}") and instructs agents to read and summarize those transcripts, which are untrusted user-generated third‑party content that could carry indirect prompt injections.