youtube-transcript

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill explicitly downloads and returns transcripts from public YouTube videos (see SKILL.md "Retrieve transcripts for YouTube videos" and scripts/extract.py's extract_transcript using yt-dlp to fetch .vtt subtitles), which are untrusted/user-generated content that the agent reads and could materially influence downstream analysis or actions.