video-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly lists yt-dlp under Tools and describes downloading/transcribing videos for "reference/remix" and using transcriptions/word-level timestamps to drive subtitle/overlay placement (references/ffmpeg-recipes.md — "Optional: yt-dlp" and the transcription sections), meaning the agent may fetch and interpret user-generated public content (e.g., YouTube) that can influence editing actions and tool use.