video-transcript-downloader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). High: the required transcript workflow fetches/reads outsider-authored subtitles/transcripts from a user-supplied URL (YouTube via youtube-transcript-plus or otherwise via yt-dlp), then converts that readable text into a paragraph written to stdout (scripts/vtd.js L240-256 and L263-281), which the agent could feed into its LLM context as free text.