youtube-tools

Warn

Audited by Socket on Jun 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated YouTube functionality is coherent and matches the official API, but the skill’s actual execution path relies on an unidentified MCP server that would receive API keys or OAuth tokens. With no install source, publisher identity, or release provenance, the trust model is incomplete and disproportionate to the credential sensitivity.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 17, 2026, 11:35 AM
Package URL
pkg:socket/skills-sh/findbene%2Fskills%2Fyoutube-tools%2F@ef711033f57dfb778fb2d4cc6804fa73dea4011ce51381e7930d801c2a3647c9
Security Audit — socket — youtube-tools