video-downloader

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes an explicit example that passes a password on the command line (yt-dlp -u "username" -p "password"), which requires embedding secret values verbatim and therefore creates an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md describes a “Video Downloader” that runs yt-dlp against user-supplied URLs (e.g., yt-dlp --batch-file urls.txt / yt-dlp extract_info(url, ...)), which at runtime can ingest arbitrary outsider-authored page/metadata content from the chosen sources without any prior selection constraint.