youtube-transcript

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the runtime workflow ingests outsider-authored free text by downloading and converting YouTube subtitle/caption content using yt-dlp from a user-provided YouTube URL (e.g., --list-subs, --write-sub/--write-auto-sub, and VTT-to-text post-processing).

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill instructs the agent to install system packages (including explicit "sudo apt update && sudo apt install -y yt-dlp") and to run installation commands that modify the machine state and require elevated privileges, so it should be flagged.