mmk-youtube-channel-summary

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The recipe explicitly fetches public YouTube RSS feeds (Step 1: curl "https://www.youtube.com/feeds/videos.xml?channel_id=...") and pulls video transcripts/metadata (Step 4–5: mmk youtube metadata/transcript) — untrusted, user-generated content that the agent reads, summarizes, and uses to determine upserts into Notion, so third-party content can materially influence actions.