yt2bb
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
srt_utils.pyscript executes various system utilities (such asnvidia-smi,wmic,sysctl, andfc-list) viasubprocess.runto gather hardware metadata regarding GPU availability, memory, and installed fonts to optimize the video processing pipeline. - [DATA_EXFILTRATION]: The skill instructs the agent to use
yt-dlp --cookies-from-browser chrome, which involves accessing sensitive browser data (cookies) to facilitate authentication with YouTube's servers for age-gated or private content. - [DYNAMIC_EXECUTION]: The
srt_utils.pyscript employsimportlib.import_moduleto dynamically load theunidecodelibrary for title transliteration, which is a form of runtime code loading. - [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves reading and translating external SRT files, which introduces a surface for indirect prompt injection.
- Ingestion points: The
parse_srtfunction insrt_utils.pyreads user-provided or generated subtitle files. - Boundary markers: While
SKILL.mdprovides detailed translation constraints, it lacks explicit safety delimiters or 'ignore' warnings for the subtitle content itself during the AI translation step. - Capability inventory: The skill has the ability to execute shell commands (
ffmpeg,yt-dlp,whisper) and perform file system writes. - Sanitization: There is no evidence of content sanitization or filtering applied to the subtitle text before it is processed by the language model.
Audit Metadata