youtube-discovery

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user-provided content such as video titles, topics, and metrics.
  • Ingestion points: Data enters the context via user input as defined in the Input and argument-hint sections of SKILL.md.
  • Boundary markers: There are no explicit instructions to ignore embedded commands or clear delimiters for the user-supplied text.
  • Capability inventory: The skill defines no technical capabilities; it performs no file system writes, network requests, or subprocess executions.
  • Sanitization: No input sanitization or validation logic is present.
  • [SAFE]: The skill contains no code, shell commands, or external dependencies. No patterns of obfuscation, persistence, or data exfiltration were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 08:35 AM