skills/spacezephyr/myskill/youtube-feed/Snyk

youtube-feed

Warn

Audited by Snyk on Aug 21, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). In youtube-feed’s runtime, scripts/get_updates.py fetches YouTube RSS XML and video descriptions (Step 1: get_channel_feed/parse_feed) and then transforms that free text into summaries shown to the user (Step 2), so outsider-authored content from selected YouTube channels is ingested.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 21, 2026, 02:10 AM

Issues

1