youtube-api
Warn
Audited by Snyk on Oct 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (medium risk: 0.30). The skill references an external quickstart script hosted on GitHub (firef1ie/OpenClawSkills), which introduces an unofficial remote operational dependency.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents direct financial operations involving USDC payments on the Base blockchain and credit purchases via x402 protocol integration (
SKILL.md:43-46,SKILL.md:91-102). These direct payment routes are controlled by independent cryptographic authentication mechanisms (EIP-191 signatures, session nonces, and wallet key verification enforced by the AgentPMT service layer) (SKILL.md:59-71,SKILL.md:99-100).
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata