yt-dlp-downloader
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing 'yt-dlp' via pip and 'ffmpeg' via Homebrew. These are widely used, legitimate open-source utilities and represent standard dependencies for this use case.
- [COMMAND_EXECUTION]: The skill constructs and executes shell commands using yt-dlp with broad permissions ('all' and 'network'), which are necessary for the tool's function.
- [PROMPT_INJECTION]: The skill processes untrusted user-provided URLs (Ingestion point: SKILL.md) and interpolates them into shell commands (Capability: Shell tool). While the instructions suggest wrapping the URL in double quotes (Boundary markers: present), there is no explicit instruction for input sanitization (Sanitization: absent), creating a surface for potential command injection or indirect prompt injection.
- [CREDENTIALS_UNSAFE]: The skill instructions promote the use of the '--cookies-from-browser' flag. This allows yt-dlp to read sensitive authentication and session data from the user's browser profiles to bypass download restrictions.
Audit Metadata