social-media-publisher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly fetches and processes arbitrary external URLs (e.g., scripts/download_videos_from_manifest_with_ytdlp.mjs, upload_media_from_url and hosted media download/upload functions like downloadHostedMediaFile in lib/hosted_media_generation_bridge.mjs), which ingests untrusted public web content (media/URLs) as part of its runtime workflow and can materially affect what is published or processed.