youtube-placement-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow monitors and consumes YouTube placement names and metadata retrieved from Google Ads accounts under the MCC, which can contain arbitrary outsider-authored titles and content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The repository URL used in installation instructions (raw.githubusercontent.com/fourteenwm/ppc-ai-skills/...) is an unofficial personal repository providing skill material, instructions, and scripts that the skill adopts and executes.