youtube-feed
Warn
Audited by Snyk on Jun 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). 该 Skill 在运行时会通过
requests.get抓取 YouTube 频道页/视频页的 HTML（fetch_channel_page、fetch_video_description），再把视频描述shortDescription经过generate_summary()清洗后作为video['summary']输出给 Agent；这些文本属于视频作者/YouTube 等外部发布内容，属于“公共网页内容/视频描述的自由文本”进入 LLM 上下文的间接提示注入风险路径。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata