consume-music

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's ingest_bridge.py explicitly reads public YouTube watch data from ~/.pi/ingest-yt-history/history.jsonl (music.youtube.com titles/urls), parses user-generated titles and metadata, and uses those parsed values to classify, tag, and learn into /memory—allowing untrusted third-party content to influence searches, tagging, and subsequent agent behavior.