youtube-downloader

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill automatically installs the yt-dlp package from the Python Package Index (PyPI) at runtime using pip if the tool is not already present on the system.
  • [COMMAND_EXECUTION]: The script uses subprocess.run to execute yt-dlp commands for fetching video metadata and performing downloads. The commands are constructed using arguments provided by the user (URL, output path) and constrained choices for quality and format.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection by processing external data from YouTube.
  • Ingestion points: Video metadata (title, uploader, duration) is fetched from YouTube via yt-dlp --dump-json in scripts/download_video.py and displayed in the console.
  • Boundary markers: The output is printed directly to the console without explicit delimiters or warnings to the agent to ignore instructions embedded in the metadata.
  • Capability inventory: The skill has the capability to execute shell commands (subprocess.run) and write files to the filesystem.
  • Sanitization: There is no sanitization or filtering of the video metadata strings retrieved from the external source.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 04:52 PM
Security Audit — agent-trust-hub — youtube-downloader