youtube-scraper
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate utility for interacting with YouTube using industry-standard open-source tools ('yt-dlp' and 'jq').
- [COMMAND_EXECUTION]: The skill uses shell commands for its primary function. These commands are well-structured and use standard flags for filtering and output formatting. While it takes user input for search queries, the implementation follows standard CLI usage patterns for this specific tool.
- [EXTERNAL_DOWNLOADS]: The skill references 'yt-dlp' and 'jq' as dependencies. The installation instructions point to official package managers (pip, homebrew, apt), which are standard and safe practices.
- [DATA_EXFILTRATION]: No evidence of unauthorized data transmission was found. Network activity is confined to 'yt-dlp' communicating with YouTube's public servers to fetch video metadata.
- [PROMPT_INJECTION]: No attempts to override agent safety guidelines or system prompts were detected in the instructions.
- [CREDENTIALS_UNSAFE]: The skill explicitly states that no API keys or authentication are required, reducing the risk of credential exposure.
Audit Metadata