baoyu-youtube-transcript
Warn
Audited by Snyk on Jul 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). Outsider-authored free text from YouTube (video description/transcript captions) is fetched at runtime via
fetchHtml/fetchTranscriptSnippets/parseTranscriptPayloadand then, in--speakersmode, is read into the LLM agent by the speaker post-processing workflow (scripts/main.tsreads the saved.mdand the prompt template consumes itsdescriptionand raw transcript text).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata