youtube
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md shows curl calls to the YouTube Data API (e.g., youtube/v3/search and youtube/v3/videos) to fetch video snippets, titles, channel info and (per description) comments from public YouTube, which is user-generated/untrusted content the agent would read and could influence its actions.
Audit Metadata