skills/hamzafarooq/claude-code-starter/youtube-deepdive/Snyk

youtube-deepdive

Warn

Audited by Snyk on Jul 11, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the workflow to navigate to user-provided YouTube URLs at runtime and extract free-form page content (description text and “top comments”) from the snapshot, which is outsider-authored text that can include prompt-injection payloads.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 11, 2026, 10:31 AM

Issues

1

Security Audit — snyk — youtube-deepdive