subtitle-extractslator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly searches and downloads subtitles from the public OpenSubtitles service (see SKILL.md workflow steps and references/opensubtitles.md describing opensubtitles_search/opensubtitles_download), then reads and interprets the downloaded subtitle text to decide candidate acceptance and to drive translation actions, which exposes the agent to untrusted, user-generated third-party content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill's runtime documentation instructs downloading and running platform binaries from the project's GitHub release URLs (e.g. https://github.com/waynebaby/SubtitleExtractslator/releases/download/v0.1.13/subtitle-extractslator-v0.1.13-linux-x64.zip), which are remote executables fetched at runtime/installation and then executed, making them a high-risk external code dependency.