download-video
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted metadata from external social media sites which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Untrusted data enters the agent's context through the output of
yt-dlp(metadata like titles and descriptions) fetched from external URLs provided in$ARGUMENTS. - Boundary markers: The skill does not provide any delimiters or instructions to the agent to ignore or isolate instructions found within the downloaded content.
- Capability inventory: The skill has the ability to execute shell commands (
yt-dlp,ls,mkdir) and perform file system operations (saving and listing files). - Sanitization: There is no evidence of sanitization or validation of the retrieved metadata before it is used within the agent's environment.
- [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands (
yt-dlp,ls,mkdir). This behavior is the primary function of the skill and uses well-known, established utilities for video management.
Audit Metadata