aituber-api

Fail

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: CRITICAL
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes curl to interact with the AITuber API for video generation, polling, and publishing tasks.
  • [EXTERNAL_DOWNLOADS]: The documentation references the official @aituber/mcp-server package and links to the vendor's GitHub repositories for the MCP server and skill collection.
  • [DATA_EXFILTRATION]: Network activity is directed to app.aituber.app, which is the official infrastructure for the AITuber service. While this domain was flagged in automated scans, it is the legitimate API endpoint for the vendor's service. The skill follows best practices by instructing the agent to use an environment variable (AITUBER_API_KEY) for authentication rather than hardcoding credentials.
Recommendations
  • Contains 20 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 23, 2026, 01:35 PM
Security Audit — agent-trust-hub — aituber-api