yt-audit
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local Python scripts to perform analysis.
- Evidence: Found calls to
../yt-package/title.pyand../yt-script/hookscore.pywithinSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of YouTube video transcripts, which are used to generate content and write to the filesystem.
- Ingestion points: The skill instructs the agent to ask for three user videos and transcribe them (found in
SKILL.md). - Boundary markers: No delimiters or explicit warnings to ignore embedded instructions are present in the processing logic.
- Capability inventory: The skill has the capability to write files to
~/.claude/youtube/voice.mdand execute local Python scripts (title.py,hookscore.py). - Sanitization: There is no evidence of sanitization or filtering of the transcript content before it is used to infer a voice profile or influence output.
Audit Metadata