music-download

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is ingested via user-provided playlist/share URL or keyword strings (e.g., scripts/download_playlist.py parses the URL with musicdl.parseplaylist and scripts/download_songs.py loads lines from a user-supplied --list file and passes each keyword to client.search) rather than selecting a specific trusted item first.