ingest-youtube

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill shells out to yt-dlp to fetch and download YouTube subtitle VTT text at runtime (--list-subs then --write-sub/--write-auto-sub), and that VTT content is read as prose via clean_vtt(vtt_path.read_text(...)) and written into the vault/LLM context.