blitzreels-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly includes a media import command ("npx blitzreels@latest media import-youtube --url "https://www.youtube.com/watch?v=...\"") that fetches public YouTube (user-generated) content which the agent is instructed to import, inspect, and then edit—allowing untrusted third-party content to influence subsequent actions.