skills/eoash/ash-skills/my-fetch-youtube/Snyk

my-fetch-youtube

Warn

Audited by Snyk on Oct 21, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The skill processes user-provided YouTube video URLs by extracting subtitles and metadata via yt-dlp and fetching arbitrary web search results, which involves low-risk, active fetching of external content.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 21, 2026, 01:21 PM

Issues

1