youtube-upload

SUSPICIOUS: the core behavior matches the stated purpose, but it uses broad browser-session automation instead of the official YouTube API and enables autonomous public posting. Supply-chain risk is moderate due to the Clawdbot prerequisite and its remote installer patterns, though there is no direct evidence of credential theft or unrelated exfiltration in this skill text.