youtube-downloader
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automatically installs the
yt-dlppackage from the Python Package Index (PyPI) at runtime usingpipif the tool is not already present on the system. - [COMMAND_EXECUTION]: The script uses
subprocess.runto executeyt-dlpcommands for fetching video metadata and performing downloads. The commands are constructed using arguments provided by the user (URL, output path) and constrained choices for quality and format. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection by processing external data from YouTube.
- Ingestion points: Video metadata (title, uploader, duration) is fetched from YouTube via
yt-dlp --dump-jsoninscripts/download_video.pyand displayed in the console. - Boundary markers: The output is printed directly to the console without explicit delimiters or warnings to the agent to ignore instructions embedded in the metadata.
- Capability inventory: The skill has the capability to execute shell commands (
subprocess.run) and write files to the filesystem. - Sanitization: There is no sanitization or filtering of the video metadata strings retrieved from the external source.
Audit Metadata