video-download

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill directly visits and ingests content from arbitrary public video pages (see SKILL.md and scripts/download.py: launch_browser_and_capture and launch_browser_and_eval which load Douyin/Xiaohongshu/Bilibili/other URLs and read window.playinfo, response URLs and page.title) and uses those untrusted, user-generated page/network contents to decide what to download and how to proceed, so third‑party content can materially influence tool actions.