youtube-apify-transcript
Warn
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: MEDIUMINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSMETADATA_POISONING
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves transcript data from external YouTube videos, which are untrusted sources that could contain instructions designed to influence the AI agent's behavior. Ingestion points:
scripts/fetch_transcript.pyfetches transcripts from the Apify API and returns them to the agent. Boundary markers: Absent; transcripts are provided as raw text without isolation markers or safety instructions. Capability inventory: The skill utilizes network access via therequestslibrary and local file system access for transcript caching in the.cache/directory. Sanitization: The skill performs no filtering or sanitization of the transcript content before it enters the agent context. - [EXTERNAL_DOWNLOADS]: The skill connects to
api.apify.comto trigger extraction jobs and retrieve results. This is a well-known service and the interaction is standard API usage based on an user-provided token. - [METADATA_POISONING]: There is a discrepancy between the attribution provided in the skill context ('nikiandr') and the metadata in the
package.jsonfile ('robbyczgw-cla'). This inconsistency is misleading regarding the skill's origin and maintenance status.
Audit Metadata