yt-transcript

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The GitHub URL points to a user-hosted Python package installed directly via pip/git (which runs arbitrary code during install) from a personal account, making it a suspicious download source; the YouTube link is benign.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s fetch runtime path reads and outputs the transcript text from a user-supplied YouTube video URL/ID, so an outsider can author/publish transcript/caption content that the agent will ingest when it fetches that specific video.