ingest-youtube

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source- authored free text from the outsider comes from the user-provided YouTube URL, which the runtime passes to yt-dlp to fetch subtitles/transcript at validate_youtube_url → list_subs → download_subs → clean_vtt, and that transcript text is then written into the vault/seeded by keyword scan.