youtube-summarizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md Step 3/4 extracts the full YouTube transcript text (from the user-provided URL’s video_id) and then reads it as LLM context (“Read “$TRANSCRIPT_FILE” # Read transcript into context” / “Extract transcript… Combine all transcript segments…”), so an outsider can choose a YouTube video whose transcript contains free-text prompt-injection payloads.