tubescribe
Warn
Audited by Socket on Apr 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The core purpose is coherent for a YouTube summarizer, and most file/network access is proportionate, but the skill materially increases risk through autonomous background execution and reliance on external CLIs, including a possible standalone yt-dlp download with unclear verification. This looks more like a high-risk but plausibly legitimate automation skill than confirmed malware.
Confidence: 82%Severity: 74%
Audit Metadata