youtube-transcript-extractor-api-skill

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python script located at scripts/youtube_transcript_extractor_api.py to facilitate API requests and data polling.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with the vendor's API at api.browseract.com to initiate transcript extraction tasks and retrieve results.
  • [CREDENTIALS_UNSAFE]: The skill utilizes the BROWSERACT_API_KEY environment variable for authentication, which is a standard and recommended practice for managing sensitive secrets.
  • [DATA_EXFILTRATION]: The skill sends user-provided YouTube URLs to the BrowserAct API for processing, which is consistent with its primary purpose of transcript extraction.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 02:30 PM
Security Audit — agent-trust-hub — youtube-transcript-extractor-api-skill