youtube-discovery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The list_public_comments action ingests outsider-authored free text (public YouTube comment thread bodies, optionally text_format: plainText/html) from YouTube at runtime and returns it in the tool response, which the agent then places into the LLM context.