youtube-api

SUSPICIOUS. The core YouTube-management purpose is coherent, but the skill routes all activity through AgentPMT, mixes in wallet-based payments/jobs beyond the stated YouTube task, and references a non-official helper script that may receive private-key material. This is not confirmed malware, but it has medium-high security risk due to intermediary credential/data flow and weak install trust.