how-to-download-yespornplease-videos

Fail

Audited by Snyk on Jun 13, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.75). These links point mainly to an unknown GitHub project and its release page (potentially hosting browser-extension packages) plus a short/brand domain (serp.ly) and non-official support site — together they match multiple high‑risk indicators (unknown publisher GitHub releases, a short/redirecting domain and distribution of browser builds) even though raw.githubusercontent.com assets and a help site are lower risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow is a browser extension that detects and downloads media from the user’s currently opened YesPornPlease page; that page’s HTML/embedded player data and any scraped/manifest text the extension reads at runtime is outsider-authored free text (public web content) fed into the extension/LLM context.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 13, 2026, 07:01 AM
Issues
2
Security Audit — snyk — how-to-download-yespornplease-videos