youtube-hooks-scripts
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill implements a feedback protocol that executes a local Python script (
utilities/skill-builder/scripts/record_skill_feedback.py) to store performance metrics. This is a standard administrative function for skill improvement within its operating environment. - [PROMPT_INJECTION]: The skill processes user-provided transcripts and notes, which constitutes a surface for indirect prompt injection. However, the skill explicitly includes instructions to redact secrets and verify technical accuracy, mitigating the risk of following malicious instructions embedded in user data.
- [DATA_EXPOSURE]: The skill includes a specific constraint to redact secrets, tokens, and credentials by default, demonstrating a security-conscious design for handling potentially sensitive user inputs.
Audit Metadata