skills/iliagerman/agents/youtube-watcher/Snyk

youtube-watcher

Warn

Audited by Snyk on Apr 28, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 1.00). The skill's required workflow (SKILL.md) instructs running scripts/get_transcript.py on public YouTube URLs to fetch and stream transcripts from arbitrary videos, meaning the agent ingests untrusted, user-generated third-party content (YouTube transcripts) that it then reads and acts on (summarize/answer), allowing indirect prompt injection.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Apr 28, 2026, 02:15 PM

Issues

1