youtube-direct

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In SKILL.md’s required runtime workflow, the user’s supplied parameters for search (e.g., --query) and transcript/comments (e.g., --video-id and paging flags) are used to request YouTube, but the agent does not ingest outsider-authored free text from an untrusted inbox/feed/source—only YouTube public content selected by those parameters.