how-to-download-yespornplease-videos
Fail
Audited by Snyk on Jun 13, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.75). These links point mainly to an unknown GitHub project and its release page (potentially hosting browser-extension packages) plus a short/brand domain (serp.ly) and non-official support site — together they match multiple high‑risk indicators (unknown publisher GitHub releases, a short/redirecting domain and distribution of browser builds) even though raw.githubusercontent.com assets and a help site are lower risk.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow is a browser extension that detects and downloads media from the user’s currently opened YesPornPlease page; that page’s HTML/embedded player data and any scraped/manifest text the extension reads at runtime is outsider-authored free text (public web content) fed into the extension/LLM context.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata