title-variants

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's generate_title_variants workflow (scripts/generate_title_variants.py) calls read_sheet_data on an arbitrary --sheet_url Google Sheet and injects user-provided fields like "Original Title" and "Video Summary" directly into the Claude prompt, so untrusted, user-generated sheet content can influence model outputs and subsequent sheet updates.