youtube-watcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required runtime path takes an outsider-supplied YouTube URL, uses yt-dlp to download the video’s .vtt subtitles, reads that VTT text (vtt_file.read_text(...)), cleans it, and prints it into the agent’s LLM context—so outsider-authored transcript text is ingested via the fetched subtitle content.