youtube-summarizer
Warn
Audited by Snyk on May 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). This skill explicitly fetches public, user-generated YouTube transcripts (see SKILL.md Workflow step 2 and scripts/extract-transcript.py which uses YouTubeTranscriptApi) and then reads and bases summaries/outputs on that untrusted transcript content, so third-party text can materially influence the agent's analysis and actions enabling indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata