youtube-transcript

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the “YouTube Transcript Downloader” workflow, the agent ingests outsider-authored free text (YouTube-provided caption/subtitle content) by calling yt-dlp to download subtitle .vtt files (yt-dlp --write-sub/--write-auto-sub ... YOUTUBE_URL) and then reads that VTT text during the plain-text conversion step.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs automatic installation using privileged package management (sudo apt install) and the supplied script runs sudo apt without requiring user confirmation, which directs the agent to change system state with elevated privileges.