youtube-research
Warn
Audited by Snyk on Jun 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.95). Outsider-authored free text from public YouTube content (e.g., video titles/descriptions and top-level comment
textOriginal/textDisplay) is ingested into the agent’s LLM context via the scripts’ runtime API responses and Markdown/JSON rendering (e.g.,video_scan.py→commentThreads→comment_text()→render_markdown(); alsotrend_scan.py/channel_scan.pyincludesnippet.description/snippet.title).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata