solo-you2idea-extract
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
bashto interact with command-line tools such aspip,solograph-cli,yt-dlp, andsed. These are used for installing dependencies, indexing video content, downloading transcripts, and text processing. - [EXTERNAL_DOWNLOADS]: The skill downloads content from YouTube (transcripts) and installs legitimate packages (
solograph,yt-dlp) from official registries viapip. These actions are necessary for the skill's primary function of video analysis. - [REMOTE_CODE_EXECUTION]: Although the skill invokes
pip install, it targets well-known packages used for the skill's stated purpose. There is no evidence of arbitrary remote script execution (e.g.,curl | bash) or loading code from untrusted external sources.
Audit Metadata