download-media
Warn
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/download-media.shappends all extra user-provided arguments directly to theyt-dlpcommand. This enables the use of flags such as--exec, which can execute arbitrary shell commands on the host after a download completes. - [CREDENTIALS_UNSAFE]: The skill's instructions specifically suggest using the
--cookies-from-browserflag to access restricted content. This exposes the user's private browser session data to the tool and the agent. - [PROMPT_INJECTION]: The skill allows for indirect prompt injection by reporting untrusted media titles (fetched from the internet) as part of the result file paths. Ingestion points: Media titles and metadata from external URLs in
scripts/download-media.sh. Boundary markers: None. Capability inventory: File system access and shell execution viabashandyt-dlp. Sanitization: No validation or sanitization is performed on the titles used in the output paths.
Audit Metadata