youtube-automation

SUSPICIOUS: the skill's purpose and capabilities are mostly aligned, but all YouTube operations and OAuth-backed actions are mediated by a third-party hosted MCP service rather than official Google endpoints. That makes the data flow and delegated account-control model higher risk than a direct API integration, though there is no evidence here of credential theft, hidden execution, or unrelated access.