Please report security issues privately through GitHub Security Advisories once the repository is published.

Do not include private videos, cookies, access tokens, local browser profiles, or downloaded media in issues or pull requests.

This project shells out to yt-dlp and local media tooling. Treat untrusted URLs and downloaded media as untrusted input. Run large batch jobs in a clean project directory and review generated artifacts before publishing them elsewhere.