skills/grahama1970/agent-skills/ingest-youtube/Socket

ingest-youtube

Warn

Audited by Socket on Mar 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s core behavior matches its stated purpose, and installs come from normal registries, so it is not fundamentally malicious. However, routing transcript traffic through IPRoyal and optionally sending audio to OpenAI introduces third-party data flow and credential forwarding beyond direct YouTube access, making the skill medium risk rather than benign.

Confidence: 88%Severity: 54%

Audit Metadata

Analyzed At

Mar 17, 2026, 06:42 AM

Package URL

pkg:socket/skills-sh/grahama1970%2Fagent-skills%2Fingest-youtube%2F@67e4c2d072e934c90a4833fade65f783459810f8