youtube-research
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
postplusCLI tool to execute shell commands for gathering YouTube channel summaries, video metrics, and audience comments. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external YouTube sources, which could contain malicious instructions embedded by third parties.
- Ingestion points: Untrusted text is retrieved from video descriptions and user comments via the
youtube-videosandyoutube-commentsroutes described inSKILL.md. - Boundary markers: While the skill defines a privacy boundary concerning subscriber identities, it does not provide explicit boundary markers or instructions to ignore potential prompts within the ingested text.
- Capability inventory: The skill executes commands through the
postplusCLI tool and includes handoff capabilities to other skills such asmedia-analysis. - Sanitization: There is no documentation of sanitization, filtering, or validation processes for the data retrieved from YouTube before it is analyzed by the agent.
Audit Metadata