youtube-playlist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow fetches YouTube playlist contents and video transcripts via TranscriptAPI, where video titles and playlist metadata authored by third parties on YouTube are ingested by the agent.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to make runtime API calls to transcriptapi.com and execute an interactive registration/verification flow using endpoints hosted on that domain, which acts as a third-party service provider (transcriptapi.com) rather than a recognized official vendor/foundation.