youtube-transcript

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests outsider-authored free text in the form of a selected YouTube video’s transcript/captions by calling DeepAPI POST /v1/scrape/youtube/transcript (and via local yt-dlp fetching --write-subs/--write-auto-subs JSON3), then extracts output[0].text / JSON3 segs into a .txt file.