video-downloader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text from the target video platform is fetched at runtime (e.g., Douyin share-page HTML via urllib.request.urlopen → window._ROUTER_DATA, or yt-dlp --dump-single-json metadata), then written into post_caption.txt/metadata.json and later merged into the final JSON printed by the CLI; this readable text is then available to any downstream LLM context that ingests the CLI output.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill runs yt-dlp with the --remote-components "ejs:github" option (used in youtube._extract_metadata/_download_command), which causes yt-dlp at runtime to fetch and execute remote components from GitHub (i.e., remote code loaded/executed during runtime), so this is a runtime external dependency that can execute code.