youtube-batch-transcript-extractor-api-skill
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
youtube_batch_transcript_extractor_api.py) to interface with the BrowserAct API. This is the primary intended function of the skill. - [DATA_EXFILTRATION]: The script sends search keywords and upload date filters to
api.browseract.com. This is a legitimate operation for the service provided and no sensitive local files or credentials (other than the required API key) are accessed or transmitted. - [CREDENTIALS_UNSAFE]: The skill correctly manages credentials by instructing the user to set the
BROWSERACT_API_KEYenvironment variable rather than hardcoding it. It provides a link to the official console for key retrieval. - [EXTERNAL_DOWNLOADS]: The skill uses the
requestslibrary to communicate withapi.browseract.com. These are API calls to the vendor's own well-known infrastructure and do not involve downloading or executing untrusted third-party code.
Audit Metadata