youtube-channel-analytics-dashboard
Fail
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The installation guide explicitly instructs users to "Run setup.exe as Administrator". This grants the executable full system privileges, posing a severe risk of privilege escalation and complete system compromise if the binary contains malicious code.
- [EXTERNAL_DOWNLOADS]: The skill directs users to download a package from an external repository and extract it using a hardcoded password ('trainer2026'). Password-protecting archives is a common technique used to evade security scanners and automated analysis tools.
- [PROMPT_INJECTION]: The skill is designed to ingest and analyze external YouTube content, including video titles, comments, and engagement data. It lacks boundary markers or instructions to ignore embedded commands, creating a vulnerability to indirect prompt injection where an attacker could influence the agent's behavior by manipulating the YouTube metadata being analyzed.
- [DATA_EXFILTRATION]: The skill includes functionality for configuring webhooks (
ConfigureWebhookAsync) to send analytics data to external servers. If the agent is instructed to process sensitive information, this feature could be used to exfiltrate that data to an attacker-controlled endpoint. - [CREDENTIALS_UNSAFE]: While the skill correctly suggests using environment variables, it explicitly references the storage and handling of sensitive
YOUTUBE_API_KEYand OAuth credentials within its configuration and environment setup sections.
Recommendations
- AI detected serious security threats
Audit Metadata