lov-media-crawler

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill takes user-supplied social media or video links and passes them into download/scraping scripts without reading monitored outsider-authored message feeds.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The repository clones a third-party open-source project from https://github.com/NanmiCoder/MediaCrawler.git at setup/runtime under the control of an optional command, constituting a common/reputable unofficial operational dependency.