youtube-watch-later-gist-summaries
Warn
Audited by Socket on Jul 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is broadly aligned with its purpose, but it performs sensitive cross-service actions: reads a private authenticated YouTube playlist, derives summaries, and bulk publishes them using the user's GitHub auth. Main risks are privacy leakage, autonomous external publishing, third-party runtime dependencies, and added exposure through gists.sh rather than only official GitHub gist links.
Confidence: 84%Severity: 63%
Audit Metadata