video-downloader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill is a “Video Downloader” that runs yt-dlp on user-supplied URLs; at runtime it fetches and parses free-form web page/video metadata from outsider sources (public web content) which can be ingested into the agent via yt-dlp stdout/stderr text (e.g., titles/uploader/format info), creating indirect prompt-injection risk.