youtube

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is fetched at runtime from YouTube captions (via uvx yt-dlp --write-auto-sub ... --skip-download), written to /tmp/VIDEO_ID.*.srv1, then read and converted into plain text by the Python snippet (open(...).read() and print(...)), which is fed into the agent/LLM context for summarization.