youtube-tools
Warn
Audited by Socket on Jun 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated YouTube functionality is coherent and matches the official API, but the skill’s actual execution path relies on an unidentified MCP server that would receive API keys or OAuth tokens. With no install source, publisher identity, or release provenance, the trust model is incomplete and disproportionate to the credential sensitivity.
Confidence: 100%Severity: 60%
Audit Metadata