read-youtube-transcript

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). scripts/get_transcript.py uses youtube-transcript-api to fetch YouTube caption text from a user-supplied URL/video_id at runtime, then formats that fetched “text” into the output (and any downstream LLM translation step would ingest it as free text), which is outsider-authored content.