youtube-pro
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes system-level commands using
yt-dlpandffmpegto download video segments and extract frames for analysis. - [EXTERNAL_DOWNLOADS]: The skill retrieves media files from YouTube URLs using the
yt-dlputility. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted transcript data from external YouTube videos and processes it using an LLM without safety boundaries.
- Ingestion points: Video transcripts are fetched via the
summarizetool as described in SKILL.md. - Boundary markers: None are specified; the transcript content is directly passed for analysis.
- Capability inventory: The agent has access to
yt-dlpfor file downloads andffmpegfor file processing. - Sanitization: There is no evidence of filtering, escaping, or instruction-aware sanitization applied to the ingested transcript data.
Audit Metadata