yt-music

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill instructs the agent to ask the user for a cookie string and pass it directly on the command line via --cookie '<cookie string>', which exposes session secrets in the command and output context.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill executes search and metadata lookup commands via ytmusicapi (e.g., searching songs, artists, and fetching public playlist items or track metadata), which ingest untrusted text results from YouTube Music into the agent context at runtime.