youtube-watch-later-gist-summaries

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly aligned with its purpose, but it performs sensitive cross-service actions: reads a private authenticated YouTube playlist, derives summaries, and bulk publishes them using the user's GitHub auth. Main risks are privacy leakage, autonomous external publishing, third-party runtime dependencies, and added exposure through gists.sh rather than only official GitHub gist links.

Confidence: 84%Severity: 63%
Audit Metadata
Analyzed At
Jul 30, 2026, 01:43 PM
Package URL
pkg:socket/skills-sh/hugobowne%2Fshow-us-your-agent-skills%2Fyoutube-watch-later-gist-summaries%2F@6f7cb46dba7e8345a931d7f825f0e3247ecb52d7a186628f6cdedd4cbb7e3894
Security Audit — socket — youtube-watch-later-gist-summaries