youtube-transcript

Warn

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill automatically attempts to install system-level packages and Python libraries including yt-dlp and openai-whisper using brew, apt, and pip.
  • [COMMAND_EXECUTION]: The skill uses sudo apt install to acquire elevated privileges for package installation on Linux systems.
  • [REMOTE_CODE_EXECUTION]: The skill generates and executes Python scripts at runtime via python3 -c to process and deduplicate subtitle files.
  • [COMMAND_EXECUTION]: Extensive use of shell commands and subprocesses (yt-dlp, whisper, rm) to manage files and external tool execution based on user-provided URLs.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 25, 2026, 06:25 AM