youtube-playlist-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The Skill contains deceptive runtime instructions to automatically install a required dependency and explicitly hide or avoid requesting user approval (lines 41–46, 48–50), which instructs the agent to conceal actions outside the stated scraping purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to invoke the BrowserAct CLI to access real YouTube pages at runtime and extract visible text (e.g., playlist/video titles and descriptions), which is outsider-authored free text from public web content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs the agent at runtime to install and invoke BrowserAct from the external installer URL (https://www.browseract.com/?co-from=social-media&redirect=https://github.com/browser-act/skills/tree/main), which would fetch and install remote code that the agent will execute and follow ("follow its current instructions"), making this a required runtime dependency that controls agent behavior.