youtube-title-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly accepts user-provided URLs and instructs "If the user provides a URL, use WebFetch to retrieve the content" (Step 1), so the agent will fetch and read arbitrary public web content which is untrusted and used directly in its title-generation workflow.