gallery-dl

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow downloads media and image galleries from user-provided URLs or community platforms such as Reddit and social media, which may contain outsider-authored text/metadata ingested at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs downloading an executable binary via curl from GitHub without signature verification or hashing, establishing an unverifiable weak operational dependency.