youtube-viral-topic
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python script (
scripts/search_youtube_viral_topic.py) to perform API queries and calculate viral scores. - [EXTERNAL_DOWNLOADS]: Fetches video and channel metadata from Google's YouTube Data API (
googleapis.com), which is a well-known and trusted service. - [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection.
- Ingestion points: Retrieves user-generated content, specifically video titles and descriptions, from the YouTube API in
scripts/search_youtube_viral_topic.py. - Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore or isolate embedded commands within the retrieved metadata.
- Capability inventory: The agent can execute local Python scripts and handle the resulting metadata for content strategy.
- Sanitization: Video descriptions are truncated to 500 characters, but no escaping or content filtering is applied to the retrieved text.
Audit Metadata