title-variants
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocessstyle execution for its internal scripts (generate_title_variants.pyandupdate_sheet.py) as part of its primary workflow. These scripts interact with local JSON files and the Google Sheets API. - [CREDENTIALS_SAFE]: The skill correctly manages sensitive credentials.
ANTHROPIC_API_KEYis loaded from a.envfile, and Google OAuth credentials use atoken.jsonorcredentials.jsonflow, which are standard and secure practices for these APIs. - [EXTERNAL_DOWNLOADS]: The skill downloads data from the Google Sheets API (
sheets.googleapis.com) and sends prompts to the Anthropic API. These are well-known services required for the skill's stated functionality. - [INDIRECT_PROMPT_INJECTION]: The skill ingests YouTube titles from external sources (JSON files or Google Sheets). While this is a potential ingestion point for untrusted data, the skill uses these titles as literal strings for analysis and does not execute them as commands. The generated output is restricted to JSON arrays of strings.
Audit Metadata