youtube-upload
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill describes the use of the
saucommand-line utility (specificallysau youtube) to perform actions such as logging into Google accounts, checking session status, and uploading video files with associated metadata.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied data, including video titles, descriptions, and tags, which are passed as arguments to shell commands. - Ingestion points: Command parameters like
--title,--desc, and--tagsinSKILL.md. - Boundary markers: No explicit boundary markers or warnings against embedded instructions are provided.
- Capability inventory: Shell command execution via the
sauCLI tool. - Sanitization: The instructions do not specify any sanitization or validation logic for the user-provided inputs before they are included in the command string.
Audit Metadata