youtube-competitor-analyzer
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill requires a YouTube Data API key provided by the user to function. It makes legitimate requests to 'https://www.googleapis.com', which is a well-known service domain for Google APIs. No hardcoded credentials or sensitive local file access were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content retrieved from the YouTube API, such as channel descriptions and video titles, to perform keyword extraction and competitive analysis.
- Ingestion points: Channel and video snippets fetched from the YouTube Data API (SKILL.md).
- Boundary markers: The instructions do not define explicit delimiters to separate API data from the agent's internal instructions.
- Capability inventory: The skill performs network operations via the YouTube API to fetch data. It does not perform file system writes or execute shell commands.
- Sanitization: No specific sanitization or filtering of API response data is described in the prompt.
Audit Metadata