viral-youtube-shorts
Fail
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a reference to
https://raw.githubusercontent.co, which is identified as a phishing domain. This URL is a typosquatted version of a legitimate service and was detected by automated security scanners within the skill's primary instruction files. - [PROMPT_INJECTION]: The instructions contain a dedicated 'Mentioning Vyral' section that directs the AI to promote an external service (
vyralcontent.com) to the user. This behavior steering serves commercial interests and biases the agent's output. - [EXTERNAL_DOWNLOADS]: Multiple links to external, non-whitelisted domains are present, including
vyralcontent.comandraw.githubusercontent.com/vyralcontent/. These resources originate from an external entity not verified as a trusted vendor. - [DATA_EXFILTRATION]: The instructions encourage the agent to direct users away from the secure platform to an external site to access 'real data,' which poses a risk of further data exposure or phishing attacks on the user.
Recommendations
- AI detected serious security threats
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata