fetch-what-say
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automatically installs missing dependencies including
yt-dlpandmlx-whisperusing pip from a well-known mirror (Tsinghua University) andffmpegvia Homebrew on macOS. - [COMMAND_EXECUTION]: Utilizes subprocess calls to execute
yt-dlpfor media retrieval,ffmpegfor audio extraction, and system utilities (likeopen) to display the generated HTML report. - [DATA_EXFILTRATION]: Manages Netscape-format cookie files for authenticated downloads from media sites. These are stored and read locally from
~/Downloads/fetch-what-say/cookies/and are not transmitted to third-party servers. - [PROMPT_INJECTION]: As a tool that processes external media, it possesses a surface for indirect prompt injection (Category 8) if a processed video transcript contains instructions intended to manipulate the agent's summarization output.
- Ingestion points:
transcript.txtgenerated from external URLs or local files inscripts/fetch_what_say.py. - Boundary markers: The summary prompt defines a strict structure but does not use specific delimiters to isolate the transcript content from instructions.
- Capability inventory: The skill can write files to the local system and execute media processing commands.
- Sanitization: No sanitization or filtering is performed on the transcript text before it is provided to the agent for summarization.
Audit Metadata