youtube-upload
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
execSyncto invoke theclawdbotcommand-line tool locally to ensure a browser instance is running with the specified profile. - [EXTERNAL_DOWNLOADS]: The script requires the
ws(WebSocket) Node.js package to communicate with the browser's developer tools. - [REMOTE_CODE_EXECUTION]: The skill utilizes the
Runtime.evaluatemethod of the Chrome DevTools Protocol to execute JavaScript snippets within the browser context for UI automation. These snippets are used to click buttons and extract page state, with user-provided text inputs being escaped to prevent injection. - [DATA_EXFILTRATION]: The skill operates on a logged-in YouTube session to perform its primary function. It accesses local video files provided via the
--videoargument to perform the upload.
Audit Metadata