youtube-video-transcript

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow calls Frevana’s /service/youtube-video-transcript endpoint and then reads the HTTP response body as text (curl -o "$RESPONSE_FILE" and cat "$RESULT_FILE"), which is outsider-authored free text (public API response) that is fed into the agent/runner’s LLM context via stdout.