mk-youtube-get-audio

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill calls yt-dlp on arbitrary YouTube URLs (see SKILL.md and scripts/audio.sh), fetching public, user-generated metadata (title, id, upload_date, etc.) and using those fields to decide retries, cookie fallbacks and download behavior, which exposes the agent to untrusted third-party content that can materially influence tool actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime ensure/download logic auto-fetches and then runs a remote yt-dlp binary from https://github.com/yt-dlp/yt-dlp/releases/latest/download (via scripts/_utility__download_ytdlp.sh and _utility__ensure_ytdlp.sh), meaning required external content is downloaded at runtime and executed as code.