youtube-downloader
Fail
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PRIVILEGE_ESCAPATION]: The skill instructions include
sudo apt update && sudo apt install -y yt-dlp, which attempts to run commands with administrative privileges for software installation.\n- [COMMAND_EXECUTION]: The skill performs shell command execution, including system package managers (apt,brew) and media tools (yt-dlp). It also executes arbitrary Python code strings.\n- [DYNAMIC_EXECUTION]: The skill generates Python scripts at runtime by interpolating shell variables into Python command strings. In the post-processing sections, variables like$VTT_FILEare inserted intopython3 -ccalls. If these variables (derived from the local filesystem) contain single quotes, it can lead to Python code injection.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from YouTube transcripts, creating a vulnerability surface.\n - Ingestion points: Video transcripts downloaded from YouTube.\n
- Boundary markers: None. The transcript text is processed and saved directly into markdown files without delimiters.\n
- Capability inventory: Shell access, Python execution, file system modification, and package installation.\n
- Sanitization: Basic regex is used to strip HTML/VTT tags, but this does not sanitize the logical content of the transcript for malicious instructions.\n- [EXTERNAL_DOWNLOADS]: The skill installs the
yt-dlppackage from external repositories (Homebrew, APT, or PyPI) to handle video processing.
Recommendations
- AI detected serious security threats
Audit Metadata