video-transcribe

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Yes—when the required workflow uses a user-supplied URL, scripts/transcribe.py downloads outsider-authored media via yt-dlp, transcribes it with faster-whisper, and then prints the resulting transcript text (print(data["text"])) which becomes readable LLM context (free-form text originating from the external video).