yt-research
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from external sources, including YouTube video titles, tags, and comments, as well as community discussions on platforms like Reddit and forums.
- Ingestion points: YouTube metadata and comments (Step 2), Reddit and forum discussions (Step 4).
- Boundary markers: The instructions do not specify the use of delimiters or boundary markers to isolate untrusted external content from the agent's instructions.
- Capability inventory: The skill possesses the ability to perform web searches (
WebSearch), write data to the local filesystem (Write), and spawn sub-agents for specialized tasks (Task). - Sanitization: There are no explicit instructions for sanitizing, escaping, or validating the external data before it is processed by the primary agent or sub-agents.
Audit Metadata