youtube

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Step 2 explicitly calls Zapier:youtube_find_video to fetch YouTube results (titles, URLs, channel names, etc.) and Step 3 requires the agent to read and evaluate those user-generated public video entries to choose and act on a recommendation, creating a clear channel for untrusted third-party content to influence decisions.