converse

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly downloads and ingests public YouTube audio (see docs/0N_HUMMING_TASKS.md Task 3 and the yt-dlp sanity script) and registers tracks into the consume-music registry/hum-cache which the Idler/MusicSelector (idler.py, MusicSelector.select) reads and uses to choose and play humming—meaning untrusted, user-generated web content is fetched and interpreted at runtime and can materially influence selection and playback behavior.