youtube-watcher
Fail
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/get_transcript.pyautomatically installs external dependenciesyt-dlpandyoutube-transcript-apifrom PyPI using pip if they are not detected locally. - [COMMAND_EXECUTION]: The skill executes shell commands for package management and YouTube data retrieval via
subprocess.run. Arguments are handled as a list, which prevents traditional shell injection. - [PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection because it ingests untrusted text from YouTube transcripts.
- Ingestion points: External YouTube transcripts are fetched in
scripts/get_transcript.py. - Boundary markers: None identified; transcript text is output directly for the agent to process.
- Capability inventory: The script has access to shell commands, network operations, and temporary file creation.
- Sanitization: No validation or sanitization is performed on the content of the transcripts.
Recommendations
- HIGH: Downloads and executes remote code from: unknown (check file) - DO NOT USE without thorough review
Audit Metadata