youtube-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required workflow ingests outsider-authored free text only from user-supplied YouTube URLs/queries that are then sent to Crawlora endpoints (e.g., /youtube/comments/{id} and /youtube/search?q=...) to retrieve transcripts/comments/search results, so attacker-controlled text can enter the pipeline via the user’s requested targets.