youtube-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill runs yt-dlp against YouTube search/listing URLs (e.g., ytsearchN:QUERY and https://www.youtube.com/results?...&sp=...), and at runtime yt-dlp ingests readable metadata like titles/channel names from YouTube pages that are authored by third parties (outsider content), which is then emitted via --print/-j and thus fed into the agent’s LLM context.