youtube-shorts-generator
Warn
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones a codebase from an external GitHub repository (https://github.com/SamurAIGPT/AI-Youtube-Shorts-Generator.git) and installs dependencies from an unverified source via pip.
- [REMOTE_CODE_EXECUTION]: It downloads and executes Python scripts from an external repository at runtime, which allows for arbitrary code execution from a source outside of the skill's immediate control.
- [COMMAND_EXECUTION]: The skill invokes shell commands such as git clone, pip install, and python main.py to setup its environment and run its logic.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted audio transcripts from YouTube videos and processes them using an LLM to rank and classify highlights without using specific boundary markers or sanitization logic.
Audit Metadata