[afarah1]

Couple of things that could be done, from the top of my head:

- Strip links, script tags, etc - Apply the same filters used in user comments - Add a warning indicating user-generated content may be present

The post suggests the UX is problematic in that it allows user-generated links to pass as YouTube generated content. I'm not familiar with Creator Studio to know if this is the case, but if so, simple changes can go a long way.

[ireadmevs]

I would even go one step further: why would an AI tasked with summarizing external comments require any tool access, especially being able to reach into non public data?

The solution to prompt injection is not more AI on top of it, it starts with data access controls