download-anything

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). The skill explicitly provides step-by-step tools and techniques to find, access, and download copyrighted or paywalled content (shadow libraries, torrents, cloud-drive search engines) and to circumvent access controls or throttling, which materially facilitates illegal downloading and evasion.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). At runtime, the workflow can ingest outsider-authored free text (the user-supplied URL/query) and then fetch and parse the corresponding remote web page/metadata through tools like yt-dlp/curl/wget, which is effectively arbitrary page content.