youtube-full
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists of instructional content and API endpoint descriptions without any executable scripts or binary files.
- [CREDENTIALS_UNSAFE]: The documentation correctly identifies that API keys should be handled via the TRANSCRIPT_API_KEY environment variable and warns against hardcoding secrets in the skill itself.
- [EXTERNAL_DOWNLOADS]: The skill mentions established open-source tools like yt-dlp and youtube-transcript-api as alternative processing methods for users who prefer local execution.
- [DATA_EXFILTRATION]: Communication with transcriptapi.com is the intended core functionality of the skill and is transparently documented as the primary data source for YouTube metadata.
Audit Metadata