music-downloader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). High: the workflow uses Playwright to fetch and render outsider-authored YouTube playlist pages at runtime (tools/verify_youtube_playlists.cjs → page.goto(album.url) → page.evaluate() reads row.innerText/document.body.innerText and includes that rendered text in the LLM-relevant JSON outputs/notes).

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill explicitly tells users to run PowerShell with "ExecutionPolicy Bypass" and to automate/inspect the user's real browser (cookies/Playwright), which instructs bypassing security mechanisms and accessing potentially sensitive local state even though it doesn't request sudo, modify system files, or create users.