tubescribe

Warn

Audited by Socket on Apr 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core purpose is coherent for a YouTube summarizer, and most file/network access is proportionate, but the skill materially increases risk through autonomous background execution and reliance on external CLIs, including a possible standalone yt-dlp download with unclear verification. This looks more like a high-risk but plausibly legitimate automation skill than confirmed malware.

Confidence: 82%Severity: 74%
Audit Metadata
Analyzed At
Apr 16, 2026, 05:37 PM
Package URL
pkg:socket/skills-sh/AlekseiUL%2Fsprut-agent-kit%2Ftubescribe%2F@8d75dc4b2463ba1ea34a2afe7c76b5cafc57f60d
Security Audit — socket — tubescribe