youtube
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads video content from the author's infrastructure (
acedata.cloud) for the purpose of uploading to YouTube. This is an expected behavior for the stated functionality. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform API requests usingcurland process data with standard utilities likejqandawk. These operations are scoped to YouTube API interactions and local file management for uploads. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of YouTube comments and search results. While it lacks explicit boundary markers for this data, it uses structured parsing with
jqand instructions mandate user confirmation for sensitive actions like uploading, which significantly mitigates risk.
Audit Metadata