youtube-analytics
Warn
Audited by Snyk on Apr 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The toolkit explicitly fetches public, user-generated YouTube data via the YouTube Data API v3 (see scripts/src/api/search.ts, videos.ts, channels.ts and core/client.ts) and SKILL.md plus the orchestration functions (scripts/src/index.ts) state that saved JSON (titles, descriptions, snippets) are read and summarized, so untrusted third‑party content could influence analysis/summaries and downstream actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata