youtube-digest

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill communicates with the vendor API at https://redfox.hk/story/api/youtube/transcript to retrieve video data. It also utilizes the deep-translator library to access Google Translate services for automated subtitle translation.
  • [COMMAND_EXECUTION]: The instructions direct the agent to execute a local Python script (extract.py) to process video links and generate output files in Markdown and Excel formats.
  • [SAFE]: API keys are managed securely through environment variables or local configuration files (~/.qoder/apis/redfox.json), avoiding the risk of hardcoded credentials. No obfuscation, persistence mechanisms, or unauthorized data access patterns were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 07:24 AM
Security Audit — agent-trust-hub — youtube-digest