youtube-transcriber
Warn
Audited by Snyk on Apr 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill navigates to and scrapes YouTube pages (e.g., the video page via navigate to https://www.youtube.com/watch?v={VIDEO_ID} and extracting transcript text with panel.innerText and playlist video links via a#video-title), which are open, user-generated third-party sources whose content is parsed and used to produce/drive downstream outputs—so untrusted content could inject instructions that influence the agent's behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata