universal-video-downloader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime path calls scripts/download.py info / download, which runs yt-dlp -j on a user-supplied URL and ingests the resulting JSON fields (e.g., title/uploader/formats) into the agent context—this content is fetched from an outsider’s public platform page/video metadata.